Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

entropy random string environment variable #31

Open
mrpops2ko opened this issue May 14, 2024 · 0 comments
Open

entropy random string environment variable #31

mrpops2ko opened this issue May 14, 2024 · 0 comments

Comments

@mrpops2ko
Copy link

hi it would be really nice if there was an env variable like UPLOAD_LENGTH=6 so that we could modify how random we want our strings to be. the default 6 is quite low and its possible to guess them if an attacker cared enough, which 99.9999% of the time they wont be.

additionally a range would be even better, being able to specify an upper and lower bound so it generates random strings between x and y length

thank you for this awesome tool! for anybody who wants it, here are my traefik rules which just slap an auth on pretty much anything that isn't the pastes

      - "traefik.http.routers.pastebin-public.rule=Host(`bin.example.com`) && (PathPrefix(`/p/`) || PathPrefix(`/static/`))" 
      - 'traefik.http.routers.pastebin-public.rule=Host(`bin.example.com`) && PathRegexp(`/[\w.-]+\.\w+$`)'
      - "traefik.http.routers.pastebin-public.entrypoints=websecure"
      - "traefik.http.routers.pastebin-public.service=pastebin-public"
      - "traefik.http.services.pastebin-public.loadbalancer.server.port=6163"

      - "traefik.http.routers.pastebin-private.rule=Host(`bin.example.com`)"   
      - "traefik.http.routers.pastebin-private.entrypoints=websecure"
      - "traefik.http.routers.pastebin-private.service=pastebin-private"
      - "traefik.http.services.pastebin-private.loadbalancer.server.port=6163"
      - "traefik.http.routers.pastebin-private.middlewares=authentik@file"
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant