diff options
| author | Jeremy Fleischman <jeremyfleischman@gmail.com> | 2025-03-10 16:58:13 -0700 |
|---|---|---|
| committer | Jeremy Fleischman <jeremyfleischman@gmail.com> | 2025-03-19 18:19:29 -0500 |
| commit | 9c02a1e422c4be807c4cc34978e310bfbab6bd90 (patch) | |
| tree | d4b043ecb1e4ca7af00d66a4bd62856da00801f6 /pkgs/development/python-modules/python-openstackclient | |
| parent | 269a2c324e595f657857aa78333ded43696a7f2b (diff) | |
services/cloudflare-dyndns: require that apiTokenFile be an api token
Previously, this option was supposed to be a file of the form
`CLOUDFLARE_API_TOKEN=...`, which has a few problems:
- That's not an api token. It's an env file fit for passing to systemd's
`EnvironmentFile` option. The user could typo the variable name, or
intentionally/unintentionally include unrelated environment variables.
- It's not how secret files usually work in NixOS. Secret files are
usually just the secret, and don't leak details about how the secret
is passed to the service.
- This increases friction for people switching between cloudflare dyndns
services, such as `services.cloudflare-dyndns` and
`services.cfdyndns`, which both have a `apiToken` option, but (before
this change) with different semantics.
Diffstat (limited to 'pkgs/development/python-modules/python-openstackclient')
0 files changed, 0 insertions, 0 deletions