配置文件中，包含明文密码？ about easeprobe HOT 3 CLOSED

At first, base64 is not encryption, it is just an encoding method. it's the same as plain text.

Secondly, using a private key to do the encryption work is good, but you still need to bring this private key into the production, everyone can use ps command to get the private key because it is on the command line. So everyone knows this private key can decrypt the sensitive message.

one of the best practices is that uses an environment variable to replace the plain text in the configuration file. This is already supported in EaseProbe.

You can replace the password with an environment variable. we support this feature. pls check PR #34

from easeprobe.

懂了， 感谢

from easeprobe.

close this issue, feel free open it if you have further questions.

from easeprobe.