Skip to content
This repository has been archived by the owner on Jul 19, 2021. It is now read-only.

Remove default borgbackup_passphrase variable #10

Open
varac opened this issue Jun 21, 2018 · 0 comments
Open

Remove default borgbackup_passphrase variable #10

varac opened this issue Jun 21, 2018 · 0 comments

Comments

@varac
Copy link

varac commented Jun 21, 2018

Please remove the default borgbackup_passphrase from defaults/main.yml .

 » grep borgbackup_passphrase defaults/main.yml 
borgbackup_passphrase: "yoursecret"

If you setup a new host, you need to remember to create a dedicated borgbackup_passphrase variable for this hosts. If you forget this, this module will use yoursecret as password for the encryption key, which is very unsecure.
People always do mistakes and we should prevent them to get into situations like this. Thanks!

varac added a commit to digitalautonomy/ansible-role-borgbackup that referenced this issue Aug 16, 2018
If you setup a new host, you need to remember to create a dedicated
borgbackup_passphrase variable for this hosts. If you forget this,
this module will use yoursecret as password for the encryption key,
which is very unsecure.
People always do mistakes and we should prevent them to get into
situations like this.
varac added a commit to digitalautonomy/ansible-role-borgbackup that referenced this issue Aug 16, 2018
If you setup a new host, you need to remember to create a dedicated
borgbackup_passphrase variable for this hosts. If you forget this,
this module will use yoursecret as password for the encryption key,
which is very unsecure.
People always do mistakes and we should prevent them to get into
situations like this.

Closes: SphericalElephant#10
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant