FR: Set linkding instance and token as an ENV VAR / Docker Secret about linka HOT 5 OPEN

👌 I got it, maybe this weekend I'll implement this feature.

from linka.

It's possible to pass environment variables to react building stage, then the vars would be statically embedded to the HTML/JS files and visible to all front-end users. If this is ok, maybe we can try it.

Maybe it's better to set the secrets in a proxy which is invisible to users, e.g. Nginx server, like following:

location = /oneapi {
  set $args $args&apiKey=tiger;
  proxy_pass https://api.somewhere.com;
}

Both solutions need modification to Dockerfile.

from linka.

For more information about react envs, please read this page: https://vitejs.dev/guide/env-and-mode.html

from linka.

For my use case both of the 2 solutions would work as my instance is private, but I agree that for other users the first one would be less than ideal from a security standpoint.

Wouldn't the proxy solution require more than just editing the Dockerfile ?
Sorry, I'm not versed at all in JS and React.

from linka.

Hi!
Did you have time to look into this ?
Thanks 😊

from linka.