[Nix-dev] Re: [Nix-commits] SVN commit: nix - 16962 - sandervanderburg - nixos/trunk/modules/services/web-servers/apache-httpd

[Nicolas Pierron]

Hi Sander,

On Fri, Sep 4, 2009 at 17:58, Sander van der
Burg<S.vanderBurg at tudelft.nl> wrote:
> +      example = [ { identifier = "myproject";
> +                    name = "My Project";
> +                    databaseURL="postgres://root:password@/tracdb";
> +                    subversionRepository="/data/subversion/myproject"; } ];
> +    };
> +

"root:password" should be read from a file which cannot be read by any
users.  In such case, the password will appear in the Nix store which
make this readable by everybody.  Moreover password are mutable and I
don't think that you want to recompile the entire system because you
have updated a password.

-- 
Nicolas Pierron
http://www.linkedin.com/in/nicolasbpierron
Lars Rasmussen (Google IO 2009) - Icland is an icland.