search

nethesis / ns8-nethvoice

NethVoice: an Asterisk based PBX
GNU General Public License v3.0
2 stars 4 forks source link

Remove sensitive data from nethvoice #292

Closed stephdl closed 1 month ago

stephdl commented 2 months ago

Previously random keys were stored in redis, now we use a passfile passwords.env to store the keys

The relevant variables are 

'MARIADB_ROOT_PASSWORD'
'AMPDBPASS'
'AMPMGRPASS'
'NETHCTI_AMI_PASSWORD'
'CDRDBPASS'
'NETHCTI_DB_PASSWORD'
'TANCREDI_STATIC_TOKEN'
'NETHVOICESECRETKEY'
'JANUS_ADMIN_SECRET'
'PHONEBOOK_DB_PASS'
'PHONEBOOK_LDAP_PASS'
'REPORTS_PASSWORD'
'REPORTS_API_KEY'
'REPORTS_SECRET'
'NETHVOICE_USER_PORTAL_PASSWORD'
'SUBSCRIPTION_SECRET'
'NETHVOICE_LDAP_PASS'

https://github.com/NethServer/dev/issues/7011