Store Admin-Password hash in .env instead of plain password

szabodanika / microbin

A secure, configurable file-sharing and URL shortening web app written in Rust.

https://microbin.eu

BSD 3-Clause "New" or "Revised" License

2.66k stars 167 forks source link

Store Admin-Password hash in .env instead of plain password #197

Open simonl169 opened 1 year ago

simonl169 commented 1 year ago

To enhance security, it would be better to generate a hash from the admin password and store that to the env file. The vaultwaden container has a nice description on how it should look like

https://github.com/dani-garcia/vaultwarden/wiki/Enabling-admin-page