xbrowsersync / api

Server-side REST API that serves requests from xBrowserSync client apps
GNU General Public License v3.0
796 stars 83 forks source link

Security: remove password from environment variables #11

Closed ours-code closed 6 years ago

ours-code commented 6 years ago

Hello,

First of all, a big thank you for providing this solution which helps all the orphans of xmarks :)

Would it be possible to make a version of the API with the DB creds put in some file rather than in the environment variables so we can set the access to the relevant process only ?

Cheers to you guys,

ly2314 commented 6 years ago

You can write your db credentials into config/settings.json

ours-code commented 6 years ago

I was following the readme hence I thought the 2 were required in order for the API server to work. Great, thank you for that fast response !