aboutsummaryrefslogtreecommitdiff
path: root/etc/private
diff options
context:
space:
mode:
authorFrancois Kritzinger <francois@codesynthesis.com>2025-01-10 14:41:50 +0200
committerFrancois Kritzinger <francois@codesynthesis.com>2025-01-10 16:06:32 +0200
commit31a8c9b8009acdeecfb26202a597fb5091369c28 (patch)
tree13b391eb104f7bdf85b7ea16b120c64f21bb22c5 /etc/private
parenta526c1bc524d2cdf4e44d18f25047280688a6fae (diff)
ci-github: Store webhook secret in a fileci-github
Keep secrets out of the configuration file for the sake of security.
Diffstat (limited to 'etc/private')
-rw-r--r--etc/private/install/brep-module.conf8
1 files changed, 5 insertions, 3 deletions
diff --git a/etc/private/install/brep-module.conf b/etc/private/install/brep-module.conf
index 07db881..2545a87 100644
--- a/etc/private/install/brep-module.conf
+++ b/etc/private/install/brep-module.conf
@@ -462,13 +462,15 @@ submit-handler-timeout 120
# The GitHub App's configured webhook secret. If not set, then the GitHub CI
-# service is disabled. Note: make sure to choose a strong (random) secret.
+# service is disabled. Note that the path must be absolute. Note: make sure to
+# choose a strong (random) secret.
#
-# ci-github-app-webhook-secret
+# ci-github-app-webhook-secret <path>
# The private key used during GitHub API authentication for the specified
-# GitHub App ID. Both vales are found in the GitHub App's settings.
+# GitHub App ID. Both vales are found in the GitHub App's settings. Note that
+# the paths must be absolute.
#
# ci-github-app-id-private-key <id>=<path>