Fix flood secret: Set at least 30 characters

Wonderfall · Nov 22, 2020 · a6ad2aa · a6ad2aa
1 parent 43118ef
commit a6ad2aa
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 3 deletions.
diff --git a/Dockerfile b/Dockerfile
@@ -7,7 +7,7 @@ ARG FLOOD_VER=4.1.2
 ARG BUILD_CORES
 
 ENV UID=991 GID=991 \
-    FLOOD_SECRET=supersecret \
+    FLOOD_SECRET=supersecret30charactersminimum \
     WEBROOT=/ \
     DISABLE_AUTH=false \
     RTORRENT_SOCK=true \

diff --git a/README.md b/README.md
@@ -20,7 +20,7 @@
 #### Environment variables
 - **UID** : user id (default : 991)
 - **GID** : group id (defaut : 991)
-- **FLOOD_SECRET** : flood secret key (defaut : mysupersecretkey) (CHANGE IT)
+- **FLOOD_SECRET** : flood secret key (defaut : supersecret30charactersminimum) (CHANGE IT)
 - **WEBROOT** : context path (base_URI) (default : /)
 - **RTORRENT_SOCK** : true or false (default : true, if false rtorrent listens on 0.0.0.0:5000)
 - **PKG_CONFIG_PATH** : `/usr/local/lib/pkgconfig` (don't touch)

diff --git a/rootfs/usr/flood/config.js b/rootfs/usr/flood/config.js
@@ -27,7 +27,7 @@ const CONFIG = {
   maxHistoryStates: 30,
   torrentClientPollInterval: 1000 * 5,
   torrentClientPollIntervalIdle: 1000 * 60 * 15,
-  secret: process.env.FLOOD_SECRET || 'secret',
+  secret: process.env.FLOOD_SECRET || 'supersecret30charactersminimum',
   configUser: connectionSettings
 };