ryan77627/guix
1
0
Fork 0
mirror of https://git.in.rschanz.org/ryan77627/guix.git synced 2025-01-11 13:49:23 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

services: zabbix-server: Do not write database password to the store.

Browse source 
* gnu/services/monitoring.scm (zabbix-front-end-config): Read the secret file
from zabbix.conf.php at runtime instead of embedding the contents.
This commit is contained in:
Marius Bakke 2022-01-26 09:28:46 +01:00
parent 440ad14128
commit 078f5bfae7
No known key found for this signature in database
GPG key ID: A2A06DF2A33A54FA
1 changed files with 5 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

11
gnu/services/monitoring.scm
View file

@ -577,7 +577,7 @@ (define (zabbix-front-end-config config)
$DB['PORT'] = '" (number->string db-port) "';
$DB['DATABASE'] = '" db-name "';
$DB['USER'] = '" db-user "';
$DB['PASSWORD'] = '" (let ((file (location-file %location))
$DB['PASSWORD'] = " (let ((file (location-file %location))
(line (location-line %location))
(column (location-column %location)))
(if (string-null? db-password)
@ -592,15 +592,14 @@ (define (zabbix-front-end-config config)
(condition
(&error-location
(location %location)))))
(string-trim-both
(with-input-from-file db-secret-file
read-string)))
(string-append "trim(file_get_contents('"
db-secret-file "'));\n"))
(begin
(display-hint (format #f (G_ "~a:~a:~a: ~a:
Consider using @code{db-secret-file} instead of @code{db-password} for better
security.") file line column 'zabbix-front-end-configuration))
db-password))) "';
db-password)))
"
// Schema name. Used for IBM DB2 and PostgreSQL.
$DB['SCHEMA'] = '';