public/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

nginx: add a warning that nginx's basic auth isn't very good.

Browse Source
This commit is contained in:
Graham Christensen
2020-11-02 08:16:01 -05:00
parent a4b86b2bf5
commit 3361a037b9
2 changed files with 10 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
nixos/modules/services/web-servers/nginx/location-options.nix
+5 -2
View File
@@ -21,7 +21,7 @@ with lib;
Basic Auth protection for a vhost. Basic Auth protection for a vhost.
WARNING: This is implemented to store the password in plain text in the WARNING: This is implemented to store the password in plain text in the
nix store. Nix store.
''; '';
}; };
@@ -30,7 +30,10 @@ with lib;
default = null; default = null;
description = '' description = ''
Basic Auth password file for a vhost. Basic Auth password file for a vhost.
Can be created via: <command>htpasswd -c &lt;filename&gt; &lt;username&gt;</command> Can be created via: <command>htpasswd -c &lt;filename&gt; &lt;username&gt;</command>.
WARNING: The generate file contains the users' passwords in a
non-cryptographically-securely hashed way.
''; '';
}; };
nixos/modules/services/web-servers/nginx/vhost-options.nix
+5 -2
View File
@@ -198,7 +198,7 @@ with lib;
Basic Auth protection for a vhost. Basic Auth protection for a vhost.
WARNING: This is implemented to store the password in plain text in the WARNING: This is implemented to store the password in plain text in the
nix store. Nix store.
''; '';
}; };
@@ -207,7 +207,10 @@ with lib;
default = null; default = null;
description = '' description = ''
Basic Auth password file for a vhost. Basic Auth password file for a vhost.
Can be created via: <command>htpasswd -c &lt;filename&gt; &lt;username&gt;</command> Can be created via: <command>htpasswd -c &lt;filename&gt; &lt;username&gt;</command>.
WARNING: The generate file contains the users' passwords in a
non-cryptographically-securely hashed way.
''; '';
}; };