Skip to content

[FEAT] Do not start server if $PASSWORD or $FILE__PASSWORD is present in the environment, but does not contain a usable password #207

@norweeg

Description

@norweeg

Is this a new feature request?

  • I have searched the existing issues

Wanted change

Make the image fail-closed so that, when the user starts the container with environment variables that imply they desire to secure the server with a password, but the password cannot be read or otherwise has a problem (e.g. a permissions issue with the file referenced by FILE__PASSWORD), that the server does not start but, instead, fails

Reason for change

to prevent users who believe they have secured the server with a password inadvertently running it effectively passwordless. Unless you are watching your logs, you may not notice that the password was not set, but the server was started anyway.

Proposed code change

No response

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or request

    Type

    No type

    Projects

    Status

    Issues

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions