Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Remove sensitive data from nethvoice #292

Merged
merged 27 commits into from
Oct 8, 2024
Merged

Remove sensitive data from nethvoice #292

merged 27 commits into from
Oct 8, 2024

Conversation

stephdl
Copy link
Contributor

@stephdl stephdl commented Sep 10, 2024

Previously random keys were stored in redis, now we use a passfile passwords.env to store the keys

The relevant variables are

'MARIADB_ROOT_PASSWORD'
'AMPDBPASS'
'AMPMGRPASS'
'NETHCTI_AMI_PASSWORD'
'CDRDBPASS'
'NETHCTI_DB_PASSWORD'
'TANCREDI_STATIC_TOKEN'
'NETHVOICESECRETKEY'
'JANUS_ADMIN_SECRET'
'PHONEBOOK_DB_PASS'
'PHONEBOOK_LDAP_PASS'
'REPORTS_PASSWORD'
'REPORTS_API_KEY'
'REPORTS_SECRET'
'NETHVOICE_USER_PORTAL_PASSWORD'
'SUBSCRIPTION_SECRET'
'NETHVOICE_LDAP_PASS'

NethServer/dev#7011

@stephdl stephdl marked this pull request as draft September 10, 2024 17:04
@stephdl stephdl force-pushed the sdl-7011 branch 7 times, most recently from 8b55528 to 3276be5 Compare September 11, 2024 17:47
@stephdl stephdl force-pushed the sdl-7011 branch 3 times, most recently from 172351b to b4693e8 Compare September 12, 2024 09:08
imageroot/systemd/user/freepbx.service Show resolved Hide resolved
# start nethcti-server if wizard step is completed
WIZARD_STEP=$(/usr/bin/podman exec mariadb mysql -u root -h 127.0.0.1 -P $NETHVOICE_MARIADB_PORT -p$MARIADB_ROOT_PASSWORD asterisk -BNe "select step from rest_wizard" | tr -d -c '[:digit:]')
WIZARD_STEP=$(/usr/bin/podman exec --env-file=./passwords.env mariadb mysql -u root -h 127.0.0.1 -P $NETHVOICE_MARIADB_PORT -p$MARIADB_ROOT_PASSWORD asterisk -BNe "select step from rest_wizard" | tr -d -c '[:digit:]')
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Are you sure the the $NETHVOICE_MARIADB_PORT and $MARIADB_ROOT_PASSWORD are expanded inside the container and not in the host?

imageroot/actions/import-module/40mysql Show resolved Hide resolved
imageroot/actions/restore-module/21database Outdated Show resolved Hide resolved
imageroot/update-module.d/10env Outdated Show resolved Hide resolved
imageroot/update-module.d/10env Outdated Show resolved Hide resolved
imageroot/actions/clone-module/20start_mariadb_service Outdated Show resolved Hide resolved
@Amygos Amygos merged commit 2a8733a into main Oct 8, 2024
4 checks passed
@Amygos Amygos deleted the sdl-7011 branch October 8, 2024 13:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants