diff options
| author | Maximilian Bosch <maximilian@mbosch.me> | 2024-09-05 12:09:05 +0200 |
|---|---|---|
| committer | Maximilian Bosch <maximilian@mbosch.me> | 2024-09-09 21:08:17 +0200 |
| commit | 862ecd674f4beced1fff1d5b91527b564eb41182 (patch) | |
| tree | f68be5ebd27c0764330019a0badf6df66ca408b5 /pkgs/development/python-modules/rangehttpserver | |
| parent | 4980a7d93826dc96621c6306b1e4b2cdd076f2ab (diff) | |
nixos/prometheus-exporters/pgbouncer: don't leak DB password into cmdline
Since `connectionStringFile` reads the file and puts it into the
invocation of the exporter, it's part of the cmdline and thus
effectively world-readable.
Added a new `connectionEnvFile` which is supposed to be an environment
file of the form
PGBOUNCER_EXPORTER_CONNECTION_STRING=...
that will be added to the systemd service. The exporter will read the
connection string from that value.
Diffstat (limited to 'pkgs/development/python-modules/rangehttpserver')
0 files changed, 0 insertions, 0 deletions