Skip to content

Conversation

@josecelano
Copy link
Member

@josecelano josecelano commented Feb 9, 2024

These fields:

  • data.tracker.token
  • data.database.connect_url
  • data.mail.password
  • data.auth.secret_key

are replaced with asterisks. Final output:

{
  "log_level": "info",
  "website": {
    "name": "Torrust"
  },
  "tracker": {
    "url": "udp://localhost:6969",
    "mode": "Public",
    "api_url": "http://localhost:1212",
    "token": "***",
    "token_valid_seconds": 7257600
  },
  "net": {
    "port": 3001,
    "base_url": null
  },
  "auth": {
    "email_on_signup": "Optional",
    "min_password_length": 6,
    "max_password_length": 64,
    "secret_key": "***"
  },
  "database": {
    "connect_url": "***"
  },
  "mail": {
    "email_verification_enabled": false,
    "from": "[email protected]",
    "reply_to": "[email protected]",
    "username": "",
    "password": "***",
    "server": "",
    "port": 25
  },
  "image_cache": {
    "max_request_timeout_ms": 1000,
    "capacity": 128000000,
    "entry_size_limit": 4000000,
    "user_quota_period_seconds": 3600,
    "user_quota_bytes": 64000000
  },
  "api": {
    "default_torrent_page_size": 10,
    "max_torrent_page_size": 30
  },
  "tracker_statistics_importer": {
    "torrent_info_update_interval": 3600,
    "port": 3002
  }
}

@josecelano josecelano added the Security Publicly Connected to Security label Feb 9, 2024
@josecelano josecelano added this to the v3.0.0 milestone Feb 9, 2024
@josecelano josecelano linked an issue Feb 9, 2024 that may be closed by this pull request
@josecelano josecelano self-assigned this Feb 9, 2024
@josecelano josecelano force-pushed the 424-remove-secrets-from-api-config-endpoint branch from a4ff205 to e108532 Compare February 9, 2024 11:38
These fields:

- data.tracker.token
- data.database.connect_url
- data.mail.password
- data.auth.secret_key

are replaced with asterisks.
@josecelano josecelano force-pushed the 424-remove-secrets-from-api-config-endpoint branch from e108532 to e341e98 Compare February 9, 2024 11:57
@josecelano
Copy link
Member Author

ACK e341e98

@josecelano josecelano merged commit 286d9cf into torrust:develop Feb 9, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Security Publicly Connected to Security

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Remove secrets from API config endpoint?

1 participant