Claude
18d5a40d32
The bootstrap and add-user docs passed --password 'plaintext' on the docker compose run command line, leaking the plaintext into shell history (~/.bash_history, ~/.zsh_history) and the process list (ps aux). Switched all three call sites to the interactive form (no --password flag), which makes Authelia prompt for the password and a confirmation without echoing. Affected: - README.md "Create your first user" step - README.md "Add a user" section - authelia/users_database.yml.example header comment https://claude.ai/code/session_013XZ1vmgk78k2PEQ5DmJhF3
39 lines
1.2 KiB
Plaintext
39 lines
1.2 KiB
Plaintext
---
|
|
###############################################################################
|
|
# Authelia users database
|
|
#
|
|
# Copy this to users_database.yml (gitignored) and edit. Generate each
|
|
# password hash with:
|
|
#
|
|
# docker compose run --rm authelia \
|
|
# authelia crypto hash generate argon2
|
|
#
|
|
# Authelia prompts for the password and a confirmation without echoing,
|
|
# so the plaintext never hits shell history or `ps aux`. Output ends
|
|
# with `Digest: $argon2id$v=19$m=...`. Paste the digest (everything from
|
|
# `$argon2id` onward) as the `password:` value below.
|
|
#
|
|
# Restart Authelia for changes to take effect (or wait refresh_interval).
|
|
###############################################################################
|
|
|
|
users:
|
|
|
|
yourname:
|
|
disabled: false
|
|
displayname: 'Your Name'
|
|
password: '$argon2id$v=19$m=65536,t=3,p=4$REPLACE_WITH_GENERATED_HASH'
|
|
email: 'you@example.com'
|
|
groups:
|
|
- 'admins'
|
|
|
|
# Add more users here. `groups` are referenced from access_control rules
|
|
# via `subject: 'group:admins'`.
|
|
#
|
|
# guest:
|
|
# disabled: false
|
|
# displayname: 'Guest'
|
|
# password: '$argon2id$v=19$m=65536,t=3,p=4$...'
|
|
# email: 'guest@example.com'
|
|
# groups:
|
|
# - 'guests'
|