diff options
| author | Francois Kritzinger <francois@codesynthesis.com> | 2025-01-10 14:41:50 +0200 |
|---|---|---|
| committer | Francois Kritzinger <francois@codesynthesis.com> | 2025-01-15 14:21:05 +0200 |
| commit | 4de6640c0d61a3c36a606eac01a8c2df8e212b03 (patch) | |
| tree | f3f19cce83a8b94985fb0474217b36fb0b6e4b65 /etc | |
| parent | 2baa14d5e07095a5ce2d82f60806e34c20c4aa71 (diff) | |
ci-github: Store webhook secret in a file
Keep secrets out of the configuration file for the sake of security.
Diffstat (limited to 'etc')
| -rw-r--r-- | etc/brep-module.conf | 8 | ||||
| -rw-r--r-- | etc/private/install/brep-module.conf | 8 |
2 files changed, 10 insertions, 6 deletions
diff --git a/etc/brep-module.conf b/etc/brep-module.conf index fd6ba67..cdf028a 100644 --- a/etc/brep-module.conf +++ b/etc/brep-module.conf @@ -454,13 +454,15 @@ menu About=?about # The GitHub App's configured webhook secret. If not set, then the GitHub CI -# service is disabled. Note: make sure to choose a strong (random) secret. +# service is disabled. Note that the path must be absolute. Note: make sure to +# choose a strong (random) secret. # -# ci-github-app-webhook-secret +# ci-github-app-webhook-secret <path> # The private key used during GitHub API authentication for the specified -# GitHub App ID. Both vales are found in the GitHub App's settings. +# GitHub App ID. Both vales are found in the GitHub App's settings. Note that +# the paths must be absolute. # # ci-github-app-id-private-key <id>=<path> diff --git a/etc/private/install/brep-module.conf b/etc/private/install/brep-module.conf index 07db881..2545a87 100644 --- a/etc/private/install/brep-module.conf +++ b/etc/private/install/brep-module.conf @@ -462,13 +462,15 @@ submit-handler-timeout 120 # The GitHub App's configured webhook secret. If not set, then the GitHub CI -# service is disabled. Note: make sure to choose a strong (random) secret. +# service is disabled. Note that the path must be absolute. Note: make sure to +# choose a strong (random) secret. # -# ci-github-app-webhook-secret +# ci-github-app-webhook-secret <path> # The private key used during GitHub API authentication for the specified -# GitHub App ID. Both vales are found in the GitHub App's settings. +# GitHub App ID. Both vales are found in the GitHub App's settings. Note that +# the paths must be absolute. # # ci-github-app-id-private-key <id>=<path> |