Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add ability to read secrets from file #1393

Open
toomyem opened this issue Jan 21, 2025 · 0 comments
Open

Add ability to read secrets from file #1393

toomyem opened this issue Jan 21, 2025 · 0 comments

Comments

@toomyem
Copy link

toomyem commented Jan 21, 2025

Describe the problem to be solved

It would be beneficial if secrets could be read from a file, not just from an environment variable. I'm deploying Grist in docker swarm and would like to have for example OIDC client secret stored as docker secret.

Describe the solution you would like

Maybe, if GRIST_OIDC_IDP_CLIENT_SECRET is not set, then check GRIST_OIDC_IDP_CLIENT_SECRET_FILE and read content of a file pointed by this variable. It is a common approach, see for example Postgres and POSTGRES_PASSWORD_FILE.

We could add a generic solution to AppSettings.ts:read() to look for VAR_FILE if VAR is not found.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant