diff options
| author | Maximilian Bosch <maximilian@mbosch.me> | 2021-10-06 17:34:48 +0200 |
|---|---|---|
| committer | Maximilian Bosch <maximilian@mbosch.me> | 2021-10-06 18:18:18 +0200 |
| commit | 9f37d6aee028679b8a94be59d74984e708acaa85 (patch) | |
| tree | 7851c2d60189879c0ae32c356712afdb59696f2e /pkgs/development/python-modules/rangehttpserver | |
| parent | fb405269612ce6df5021e97d57dca9be3bfeed86 (diff) | |
nixos/nextcloud: put secrets into the environment of nextcloud-setup.service
The `$(</path/to/file)`-expansion appears verbatim in the cmdline of
`nextcloud-occ` which means that an unprivileged user could find
sensitive values (i.e. admin password & database password) by monitoring
`/proc/<pid>/cmdline`.
Now, these values don't appear in a command line anymore, but will be
passed as environment variables to `nextcloud-occ`.
Diffstat (limited to 'pkgs/development/python-modules/rangehttpserver')
0 files changed, 0 insertions, 0 deletions