feat: secrets of clients now need to be hashed, added command to create hash

This commit is contained in:
2025-04-25 21:35:52 +02:00
parent a77e96be6e
commit 81dcd9c7cc
5 changed files with 58 additions and 9 deletions

View File

@@ -13,7 +13,10 @@ upstream:
api_token_file: "/path/to/your/hetzner_token.txt"
clients:
client1:
secret: "s3cr3t123"
# The client secret must be a bcrypt hash.
# Generate one using: go run ./cmd/updns hash-secret <your-secret>
# Or using htpasswd: htpasswd -nbB <username> <your-secret> | cut -d: -f2
secret_hash: "$2a$10$abcdefghijklmnopqrstuv" # Replace with your actual hash
exact:
- "home.example.com"
wildcard: