1
0
Fork 0
mirror of https://github.com/retspen/webvirtcloud synced 2026-10-18 00:50:07 +00:00
webvirtcloud/conf/runit
catborise 7435d66492 fix(security): resolve reviewer findings on secret key baking, host symlinks, and injection safety
- Prevent baking SECRET_KEY into Docker image during collectstatic
- Persist runtime SECRET_KEY in data/secret_key volume or read from environment
- Remove sed-based injection of CSRF_TRUSTED_ORIGINS in favor of native os.getenv
- Avoid overwriting system python3 symlink on SUSE; auto-detect python 3.10+ binaries
- Make /etc/hosts entry in installer idempotent
- Add security notice regarding compute node VNC/SPICE port firewall isolation
2026-09-25 22:06:16 +03:00
..
10_webvirtcloud_init.sh fix(security): resolve reviewer findings on secret key baking, host symlinks, and injection safety 2026-09-25 22:06:16 +03:00
nginx Dockerization 2015-10-15 20:47:10 +08:00
nginx-log-forwarder Dockerization 2015-10-15 20:47:10 +08:00
novncd.sh fix linter warnings for bash 2020-09-25 13:26:17 +03:00
secret_generator.py update secret generator with new python secrets module - urlsafe 2022-06-28 11:13:23 +03:00
webvirtcloud.sh fix linter errors: bash scripts 2020-10-17 23:30:00 +03:00