Security: Remove exposed tokens and credentials

This commit is contained in:
Debian
2026-03-15 03:39:41 +00:00
parent a2623a5683
commit 9bbf657ea9
7 changed files with 9 additions and 9 deletions

View File

@@ -73,7 +73,7 @@ sudo nixos-rebuild switch
|-----------|--------| |-----------|--------|
| Serveur | `headscale.du-senegal.com` | | Serveur | `headscale.du-senegal.com` |
| Fallback | `141.94.23.212` | | Fallback | `141.94.23.212` |
| Auth Key | `f43f36ef159b3df799eb316b81bdac1b415c7cc2add174d0` | | Auth Key | `<HEADSCALE_AUTHKEY>` |
### NATS (Bus de messages) ### NATS (Bus de messages)

View File

@@ -38,7 +38,7 @@ echo -e "${NC}"
# Configuration # Configuration
HEADSCALE_URL="https://headscale.du-senegal.com" HEADSCALE_URL="https://headscale.du-senegal.com"
HEADSCALE_FALLBACK="http://141.94.23.212" HEADSCALE_FALLBACK="http://141.94.23.212"
HEADSCALE_AUTHKEY="f43f36ef159b3df799eb316b81bdac1b415c7cc2add174d0" HEADSCALE_AUTHKEY="<HEADSCALE_AUTHKEY>"
GIT_REPO="https://git.du-senegal.com/kawa_bot/kawa-context.git" GIT_REPO="https://git.du-senegal.com/kawa_bot/kawa-context.git"
NAMESPACE="kawa" NAMESPACE="kawa"
@@ -242,7 +242,7 @@ EOF
enable = true; enable = true;
extraUpFlags = [ extraUpFlags = [
"--login-server=https://headscale.du-senegal.com" "--login-server=https://headscale.du-senegal.com"
"--authkey=f43f36ef159b3df799eb316b81bdac1b415c7cc2add174d0" "--authkey=<HEADSCALE_AUTHKEY>"
]; ];
}; };

View File

@@ -38,7 +38,7 @@ echo -e "${NC}"
# Configuration # Configuration
HEADSCALE_URL="https://headscale.du-senegal.com" HEADSCALE_URL="https://headscale.du-senegal.com"
HEADSCALE_FALLBACK="http://141.94.23.212" HEADSCALE_FALLBACK="http://141.94.23.212"
HEADSCALE_AUTHKEY="f43f36ef159b3df799eb316b81bdac1b415c7cc2add174d0" HEADSCALE_AUTHKEY="<HEADSCALE_AUTHKEY>"
GIT_REPO="https://git.du-senegal.com/kawa_bot/kawa-context.git" GIT_REPO="https://git.du-senegal.com/kawa_bot/kawa-context.git"
NAMESPACE="kawa" NAMESPACE="kawa"
@@ -242,7 +242,7 @@ EOF
enable = true; enable = true;
extraUpFlags = [ extraUpFlags = [
"--login-server=https://headscale.du-senegal.com" "--login-server=https://headscale.du-senegal.com"
"--authkey=f43f36ef159b3df799eb316b81bdac1b415c7cc2add174d0" "--authkey=<HEADSCALE_AUTHKEY>"
]; ];
}; };

View File

@@ -12,7 +12,7 @@
enable = true; enable = true;
extraUpFlags = [ extraUpFlags = [
"--login-server=https://headscale.du-senegal.com" "--login-server=https://headscale.du-senegal.com"
"--authkey=f43f36ef159b3df799eb316b81bdac1b415c7cc2add174d0" "--authkey=<HEADSCALE_AUTHKEY>"
"--force-reauth" "--force-reauth"
]; ];
}; };

View File

@@ -22,7 +22,7 @@
serviceConfig = { serviceConfig = {
Type = "oneshot"; Type = "oneshot";
RemainAfterExit = true; RemainAfterExit = true;
ExecStart = "${pkgs.tailscale}/bin/tailscale up --login-server=https://headscale.du-senegal.com --authkey=f43f36ef159b3df799eb316b81bdac1b415c7cc2add174d0 --force-reauth"; ExecStart = "${pkgs.tailscale}/bin/tailscale up --login-server=https://headscale.du-senegal.com --authkey=<HEADSCALE_AUTHKEY> --force-reauth";
}; };
}; };

View File

@@ -26,7 +26,7 @@ in
authKey = mkOption { authKey = mkOption {
type = types.str; type = types.str;
default = "f43f36ef159b3df799eb316b81bdac1b415c7cc2add174d0"; default = "<HEADSCALE_AUTHKEY>";
description = "Clé d'authentification"; description = "Clé d'authentification";
}; };
}; };

2
setup
View File

@@ -6,7 +6,7 @@ set -e
HEADSCALE_URL="https://headscale.du-senegal.com" HEADSCALE_URL="https://headscale.du-senegal.com"
HEADSCALE_FALLBACK="http://141.94.23.212" HEADSCALE_FALLBACK="http://141.94.23.212"
HEADSCALE_AUTHKEY="f43f36ef159b3df799eb316b81bdac1b415c7cc2add174d0" HEADSCALE_AUTHKEY="<HEADSCALE_AUTHKEY>"
# Paramètres NATS # Paramètres NATS
NATS_SERVER="100.64.0.1:4222" NATS_SERVER="100.64.0.1:4222"