azukaar / Cosmos-Server

☁️ The Most Secure and Easy Selfhosted Home Server. Take control of your data and privacy without sacrificing security and stability (Authentication, anti-DDOS, anti-bot)
https://cosmos-cloud.io
Other
3.44k stars 118 forks source link

DNS Token visible to all users #242

Closed lyrameg closed 5 months ago

lyrameg commented 5 months ago

What happened?

When logged in as a user you can see the DNS Token(mine shows using Duckdns Token, haven’t tried others)

What should have happened?

It Should be like the smtp and mongodb secrets

How to reproduce the bug?

  1. log in as a user
  2. Click on 'Configuration'
  3. Scroll down to 'DNS challenge
  4. See the 'DUCKDNS_TOKEN' as cleartext

Relevant log output

No response

Other details

No response

System details

azukaar commented 5 months ago

Fixed in 0.15.4