Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Password protection for database and broker #63

Open
uniqueg opened this issue Oct 9, 2018 · 1 comment
Open

Password protection for database and broker #63

uniqueg opened this issue Oct 9, 2018 · 1 comment
Labels
flag: good 1st issue Good for newcomers priority: low Low priority type: security Related to security workload: minutes Likely takes minutes to resolve

Comments

@uniqueg
Copy link
Member

uniqueg commented Oct 9, 2018

Is your feature request related to a problem? Please describe.
MongoDB and RabbitMQ are currently unprotected or protected by default credentials.

Describe the solution you'd like
For a start, use config settings to hold default credentials. Once a strategy for passing secrets during build time (see #64) is in place, remove credentials from config and pass securely.

Describe alternatives you've considered
N/A

Additional context
N/A

@uniqueg uniqueg added this to the Release candidate v1.0.0-rc milestone Oct 9, 2018
@uniqueg uniqueg removed this from the Release candidate v1.0.0-rc milestone Sep 1, 2019
@uniqueg uniqueg removed the security label Feb 20, 2020
@uniqueg
Copy link
Member Author

uniqueg commented Apr 20, 2020

This has already been done for the database. See #64 for details

@uniqueg uniqueg assigned uniqueg and unassigned uniqueg Apr 20, 2020
@uniqueg uniqueg added flag: good 1st issue Good for newcomers priority: low Low priority type: security Related to security workload: minutes Likely takes minutes to resolve labels Apr 20, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
flag: good 1st issue Good for newcomers priority: low Low priority type: security Related to security workload: minutes Likely takes minutes to resolve
Projects
None yet
Development

No branches or pull requests

1 participant