this post was submitted on 02 Aug 2024
789 points (96.7% liked)

Selfhosted

40432 readers
607 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don't duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 2 years ago
MODERATORS
 
you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 4 points 3 months ago (2 children)

Yes because having a user remember to do something is a great line of defense, better than encrypting it from the get go. It should just be encrypted in the file.

[–] gsfraley 3 points 3 months ago* (last edited 3 months ago)

I think that's the way both Splunk and JFrog work -- you generate or enter a password into the key field in a YAML file somewhere, start the service, and next time you come back the field's been encrypted.

[–] [email protected] 1 points 3 months ago

The step tells you to remove it after at least