Encrypt password while using basic auth

[Dajma]

I have Jira server installation which does not support api token and Jiralert does not support oauth, so basic auth is the only option.
Is there a way to encrypt the password somehow or provide it via environment variable. BTW, I intend to use the jiralert container.

[bwplotka]

Yes! I think I love this idea.

What about envvar substitution inside configuration file. E.g we could use https://github.com/thanos-io/thanos/blob/main/pkg/reloader/reloader.go#L411:6 would that work?

PRs and help wanted 🤗

[splitt3r]

Env var substitution would be a great addition. That way one could also pass the PAT to the app in a secure way.

Maybe i will find the time to give it a try. Adding:

https://github.com/thanos-io/thanos/blob/296c4ab4baf2c8dd6abdf2649b0660ac77505e63/pkg/reloader/reloader.go#L445-L462

to

jiralert/pkg/config/config.go

Line 63 in a0f0e80

content, err := ioutil.ReadFile(filename)

just like

https://github.com/thanos-io/thanos/blob/296c4ab4baf2c8dd6abdf2649b0660ac77505e63/pkg/reloader/reloader.go#L302-L305

plus some tests like

https://github.com/thanos-io/thanos/blob/296c4ab4baf2c8dd6abdf2649b0660ac77505e63/pkg/reloader/reloader_test.go#L89-L102

should be pretty much it right?

Also related: prometheus/alertmanager#2855

[rati3l]

Here's a PR with the changes required:
#125