fleet/.dockerignore at 5aa265bc301d652a925da0451042b390697024ee - fleet - example

empayre/fleet

mirror of https://github.com/empayre/fleet.git synced 2024-11-06 08:55:24 +00:00

CptOfEvilMinions 626429c38e

Added support to read jwt and mysql password from a file (#141 )

The current implementation of FleetDM doesn't support Docker secrets for supplying the MySQL password and JWT key. This PR provides the ability for a file path to read in secrets. The goal of this PR is to avoid storing secrets in a static config or in an environment variable. 

Example config for Docker:
```yaml
mysql:
  address: mysql:3306
  database: fleet
  username: fleet
  password_path: /run/secrets/mysql-fleetdm-password
redis:
  address: redis:6379
server:
  address: 0.0.0.0:8080
  cert: /run/secrets/fleetdm-tls-cert
  key: /run/secrets/fleetdm-tls-key
auth:
  jwt_key_path: /run/secrets/fleetdm-jwt-key
filesystem:
  status_log_file: /var/log/osquery/status.log
  result_log_file: /var/log/osquery/result.log
  enable_log_rotation: true
logging:
  json: true
```

2021-01-04 07:58:43 -08:00

2 lines

66 B

Plaintext

Raw Blame History

	`!build/binary-bundle/linux/fleet`
	`!build/binary-bundle/linux/fleet`