Describe feature
I'd like to see support for the environment variable suffix _FILE to securely handle secrets such as the TRILIUM_MULTIFACTORAUTHENTICATION_OAUTHCLIENTSECRET.
When encountering TRILIUM_MULTIFACTORAUTHENTICATION_OAUTHCLIENTSECRET_FILE: string, Trilium would treat the string as a path and load the secret from the file.
Additional Information
Storing secrets in environment variables is not considered secure and easy to mess up. Smallstep has written about why to avoid them here and there:
I didn't see any mention of this feature in the docs and looked for any previous feature requests with the search terms:
_FILEdocker secretsecret
Since the introduction of GitHub semantic search, my personal success rate in searching for issues has experienced a sharp decline though.
Describe feature
I'd like to see support for the environment variable suffix
_FILEto securely handle secrets such as theTRILIUM_MULTIFACTORAUTHENTICATION_OAUTHCLIENTSECRET.When encountering
TRILIUM_MULTIFACTORAUTHENTICATION_OAUTHCLIENTSECRET_FILE: string, Trilium would treat the string as a path and load the secret from the file.Additional Information
Storing secrets in environment variables is not considered secure and easy to mess up. Smallstep has written about why to avoid them here and there:
I didn't see any mention of this feature in the docs and looked for any previous feature requests with the search terms:
_FILEdocker secretsecretSince the introduction of GitHub semantic search, my personal success rate in searching for issues has experienced a sharp decline though.