Skip to content

Passwords should not be logged #73

@fweep

Description

@fweep

On container startup, passwords are logged in plaintext. I've replaced them with REDACTED below, but they're plaintext. If you feel this is useful diagnostic information, please hide it behind a debug flag.

postfixadmin  | Postfixadmin not found in /var/www/html - copying now...
postfixadmin  | Complete! Postfixadmin has been successfully copied to /var/www/html
postfixadmin  | Write config to /var/www/html/config.local.php
postfixadmin  | <?php
postfixadmin  |                 $CONF['database_type'] = 'pgsql';
postfixadmin  |                 $CONF['database_host'] = 'REDACTED';
postfixadmin  |                 $CONF['database_port'] = '5432';
postfixadmin  |                 $CONF['database_user'] = 'postfixadmin';
postfixadmin  |                 $CONF['database_password'] = 'REDACTED';
postfixadmin  |                 $CONF['database_name'] = 'postfixadmin';
postfixadmin  |                 $CONF['setup_password'] = 'REDACTED';
postfixadmin  |                 $CONF['smtp_server'] = 'REDACTED';
postfixadmin  |                 $CONF['smtp_port'] = '25';
postfixadmin  |                 $CONF['encrypt'] = 'php_crypt:SHA512';
postfixadmin  |                 $CONF['configured'] = true;
postfixadmin  |                 ?>

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions