Security: Remove exposed tokens and credentials
This commit is contained in:
@@ -73,7 +73,7 @@ sudo nixos-rebuild switch
|
|||||||
|-----------|--------|
|
|-----------|--------|
|
||||||
| Serveur | `headscale.du-senegal.com` |
|
| Serveur | `headscale.du-senegal.com` |
|
||||||
| Fallback | `141.94.23.212` |
|
| Fallback | `141.94.23.212` |
|
||||||
| Auth Key | `f43f36ef159b3df799eb316b81bdac1b415c7cc2add174d0` |
|
| Auth Key | `<HEADSCALE_AUTHKEY>` |
|
||||||
|
|
||||||
### NATS (Bus de messages)
|
### NATS (Bus de messages)
|
||||||
|
|
||||||
|
|||||||
@@ -38,7 +38,7 @@ echo -e "${NC}"
|
|||||||
# Configuration
|
# Configuration
|
||||||
HEADSCALE_URL="https://headscale.du-senegal.com"
|
HEADSCALE_URL="https://headscale.du-senegal.com"
|
||||||
HEADSCALE_FALLBACK="http://141.94.23.212"
|
HEADSCALE_FALLBACK="http://141.94.23.212"
|
||||||
HEADSCALE_AUTHKEY="f43f36ef159b3df799eb316b81bdac1b415c7cc2add174d0"
|
HEADSCALE_AUTHKEY="<HEADSCALE_AUTHKEY>"
|
||||||
GIT_REPO="https://git.du-senegal.com/kawa_bot/kawa-context.git"
|
GIT_REPO="https://git.du-senegal.com/kawa_bot/kawa-context.git"
|
||||||
NAMESPACE="kawa"
|
NAMESPACE="kawa"
|
||||||
|
|
||||||
@@ -242,7 +242,7 @@ EOF
|
|||||||
enable = true;
|
enable = true;
|
||||||
extraUpFlags = [
|
extraUpFlags = [
|
||||||
"--login-server=https://headscale.du-senegal.com"
|
"--login-server=https://headscale.du-senegal.com"
|
||||||
"--authkey=f43f36ef159b3df799eb316b81bdac1b415c7cc2add174d0"
|
"--authkey=<HEADSCALE_AUTHKEY>"
|
||||||
];
|
];
|
||||||
};
|
};
|
||||||
|
|
||||||
|
|||||||
@@ -38,7 +38,7 @@ echo -e "${NC}"
|
|||||||
# Configuration
|
# Configuration
|
||||||
HEADSCALE_URL="https://headscale.du-senegal.com"
|
HEADSCALE_URL="https://headscale.du-senegal.com"
|
||||||
HEADSCALE_FALLBACK="http://141.94.23.212"
|
HEADSCALE_FALLBACK="http://141.94.23.212"
|
||||||
HEADSCALE_AUTHKEY="f43f36ef159b3df799eb316b81bdac1b415c7cc2add174d0"
|
HEADSCALE_AUTHKEY="<HEADSCALE_AUTHKEY>"
|
||||||
GIT_REPO="https://git.du-senegal.com/kawa_bot/kawa-context.git"
|
GIT_REPO="https://git.du-senegal.com/kawa_bot/kawa-context.git"
|
||||||
NAMESPACE="kawa"
|
NAMESPACE="kawa"
|
||||||
|
|
||||||
@@ -242,7 +242,7 @@ EOF
|
|||||||
enable = true;
|
enable = true;
|
||||||
extraUpFlags = [
|
extraUpFlags = [
|
||||||
"--login-server=https://headscale.du-senegal.com"
|
"--login-server=https://headscale.du-senegal.com"
|
||||||
"--authkey=f43f36ef159b3df799eb316b81bdac1b415c7cc2add174d0"
|
"--authkey=<HEADSCALE_AUTHKEY>"
|
||||||
];
|
];
|
||||||
};
|
};
|
||||||
|
|
||||||
|
|||||||
@@ -12,7 +12,7 @@
|
|||||||
enable = true;
|
enable = true;
|
||||||
extraUpFlags = [
|
extraUpFlags = [
|
||||||
"--login-server=https://headscale.du-senegal.com"
|
"--login-server=https://headscale.du-senegal.com"
|
||||||
"--authkey=f43f36ef159b3df799eb316b81bdac1b415c7cc2add174d0"
|
"--authkey=<HEADSCALE_AUTHKEY>"
|
||||||
"--force-reauth"
|
"--force-reauth"
|
||||||
];
|
];
|
||||||
};
|
};
|
||||||
|
|||||||
@@ -22,7 +22,7 @@
|
|||||||
serviceConfig = {
|
serviceConfig = {
|
||||||
Type = "oneshot";
|
Type = "oneshot";
|
||||||
RemainAfterExit = true;
|
RemainAfterExit = true;
|
||||||
ExecStart = "${pkgs.tailscale}/bin/tailscale up --login-server=https://headscale.du-senegal.com --authkey=f43f36ef159b3df799eb316b81bdac1b415c7cc2add174d0 --force-reauth";
|
ExecStart = "${pkgs.tailscale}/bin/tailscale up --login-server=https://headscale.du-senegal.com --authkey=<HEADSCALE_AUTHKEY> --force-reauth";
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|
||||||
|
|||||||
@@ -26,7 +26,7 @@ in
|
|||||||
|
|
||||||
authKey = mkOption {
|
authKey = mkOption {
|
||||||
type = types.str;
|
type = types.str;
|
||||||
default = "f43f36ef159b3df799eb316b81bdac1b415c7cc2add174d0";
|
default = "<HEADSCALE_AUTHKEY>";
|
||||||
description = "Clé d'authentification";
|
description = "Clé d'authentification";
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|||||||
2
setup
2
setup
@@ -6,7 +6,7 @@ set -e
|
|||||||
|
|
||||||
HEADSCALE_URL="https://headscale.du-senegal.com"
|
HEADSCALE_URL="https://headscale.du-senegal.com"
|
||||||
HEADSCALE_FALLBACK="http://141.94.23.212"
|
HEADSCALE_FALLBACK="http://141.94.23.212"
|
||||||
HEADSCALE_AUTHKEY="f43f36ef159b3df799eb316b81bdac1b415c7cc2add174d0"
|
HEADSCALE_AUTHKEY="<HEADSCALE_AUTHKEY>"
|
||||||
|
|
||||||
# Paramètres NATS
|
# Paramètres NATS
|
||||||
NATS_SERVER="100.64.0.1:4222"
|
NATS_SERVER="100.64.0.1:4222"
|
||||||
|
|||||||
Reference in New Issue
Block a user