search

Metaswitch / clearwater-docker

Docker integration for Project Clearwater
Other
41 stars 64 forks source link

Initial secret is hardcoded #50

Open plwhite opened 7 years ago

plwhite commented 7 years ago

When clearwater is started, ellis has a default secret of "secret". There is no way to change that value (and it is clearly insecure). There should be a documented way to change it.

richardwhiuk commented 7 years ago

Do you mean the signup key? Is there any reason you can't follow the process in http://clearwater.readthedocs.io/en/stable/Clearwater_Configuration_Options_Reference.html to change the signup key?

plwhite commented 7 years ago

@richardwhiuk Interesting - I hadn't found that document, thanks.

How do I change the values in the configuration files in a Docker deployment? Is there a procedure, or do I just have to change values in all my images? I could in principle get access to each container and hack about with files in it, but that isn't very clean (when an instance restarts, the changes would be lost, for example, and it's error prone).

eleanor-merry commented 7 years ago

Ported to https://github.com/Metaswitch/project-clearwater-issues/issues/11