Avoid database credentials in config file #974
Labels
No labels
blocked
breaking
bug
data loss
design finalized
good first issue
new feature area
question / support
security
waiting for response
No milestone
No assignees
2 participants
Notifications
Due date
No due date set.
Dependencies
No dependencies set
Reference
borgmatic-collective/borgmatic#974
Loading…
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
What I'd like to do and why
For file backups, borgmatic allows to store passwords outside the config file. This is missing for database backups where the credentials are required to be in the borgmatic configuration file itself. I would love to store it in an environment variable or in a hidden file.
Other notes / implementation ideas
No response
You can actually already use environment variables to provide your database passwords with borgmatic. See the documentation here and let me know if you have any questions: https://torsion.org/borgmatic/docs/how-to/provide-your-passwords/
As for reading credentials from file, please see this ticket for some ideas and feel free to weigh in: #966
Thanks! I did not notice that this works for db paswords as well.