https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=41774 --- Comment #1 from Kyle M Hall (khall) <kyle@bywatersolutions.com> --- Created attachment 192496 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=192496&action=edit Bug 41774: Add ability to read encryption key from environment variable
From a security standpoint it would be useful to be able to store Koha's encryption key in an environment variable. This is particularly useful in containerized environments, but is not limited to that use case.
Test plan: 1) Apply this patch 2) Remove or comment out the encryption key in koha-conf.xml 3) Restart plack 4) Browse to the "System information" tab of the about page 5) Note the missing encryption_key warning on the page 6) restart plack again, inject the encryption key as an environment variable: sudo KOHA_ENCRYPTION_KEY=t0P_secret koha-plack --restart kohadev 7) Reload the about page 8) Note the warning is gone! -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.