search

restic / rest-server

Rest Server is a high performance HTTP server that implements restic's REST backend API.
BSD 2-Clause "Simplified" License
944 stars 140 forks source link

rest: Server User / Password #103

Closed MyLive closed 4 years ago

MyLive commented 4 years ago

Hello @all,

from my Point, it's not a good solution to send the Passwort / User with the URL. Everyone can see the data in the Process list.

is there any other option ? like export as variable ... or entering after starting restic ?

Thanks a lot :-), René

wojas commented 4 years ago

Try the RESTIC_REPOSITORY env var (docs).

MyLive commented 4 years ago

Try the RESTIC_REPOSITORY env var (docs).

I knew the env var's, but none of these fit

rawtaz commented 4 years ago

@MyLive Please elaborate on what you mean. The rest-server accepts authentication credentials in the HTTP, it doesn't request that you put them in a URL at all. What makes you think it does, or where are you seeing username and password being put in the URL?

I'm guessing your concern isn't about rest-server, but perhaps you're thinking about how other software such as restic use it (where you specify the username and password in the URL, unless you use the RESTIC_PASSWORD environment variable instead).