Maximilian Bosch e33cbdc2de
nixos/nextcloud: put secrets into the environment of nextcloud-setup.service
The `$(</path/to/file)`-expansion appears verbatim in the cmdline of
`nextcloud-occ` which means that an unprivileged user could find
sensitive values (i.e. admin password & database password) by monitoring
`/proc/<pid>/cmdline`.

Now, these values don't appear in a command line anymore, but will be
passed as environment variables to `nextcloud-occ`.

(cherry picked from commit 9f37d6aee028679b8a94be59d74984e708acaa85)
2021-10-09 20:05:38 +02:00
..
2021-04-19 03:05:07 +09:00
2021-09-13 16:20:46 +00:00
2021-04-22 12:48:48 +02:00