Skip to content

Commit 08ba333

Browse files
ludomikulaludomikula
committed
new: add configuration of node service communication encryption
1 parent d7f7b61 commit 08ba333

File tree

8 files changed

+40
-2
lines changed

8 files changed

+40
-2
lines changed

‎deploy/docker/README.md

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -44,6 +44,8 @@ Image can be configured by setting environment variables.
4444
| `LOWCODER_API_RATE_LIMIT` | Number of max Request per Second | `100` |
4545
| `LOWCODER_API_SERVICE_URL` | Lowcoder API service URL | `http://localhost:8080` |
4646
| `LOWCODER_NODE_SERVICE_URL` | Lowcoder Node service (js executor) URL | `http://localhost:6060` |
47+
| `LOWCODER_NODE_SERVICE_SECRET` | Secret used for encrypting communication between API service and Node service - CHANGE IT! | |
48+
| `LOWCODER_NODE_SERVICE_SALT` | Salt used for encrypting communication between API service and Node service - CHANGE IT! | |
4749
| `LOWCODER_MAX_ORGS_PER_USER` | Default maximum organizations per user | `100` |
4850
| `LOWCODER_MAX_MEMBERS_PER_ORG` | Default maximum members per organization | `1000` |
4951
| `LOWCODER_MAX_GROUPS_PER_ORG` | Default maximum groups per organization | `100` |
@@ -128,6 +130,8 @@ Image can be configured by setting environment variables.
128130
| `LOWCODER_COOKIE_NAME` | Name of the lowcoder application cookie | `LOWCODER_CE_SELFHOST_TOKEN` |
129131
| `LOWCODER_COOKIE_MAX_AGE` | Lowcoder application cookie max age in hours | `24` |
130132
| `LOWCODER_APP_SNAPSHOT_RETENTIONTIME` | Application snapshots retention time in days | `30` |
133+
| `LOWCODER_NODE_SERVICE_SECRET` | Secret used for encrypting communication between API service and Node service - CHANGE IT! | |
134+
| `LOWCODER_NODE_SERVICE_SALT` | Salt used for encrypting communication between API service and Node service - CHANGE IT! | |
131135

132136
Also you should set the API-KEY secret, whcih should be a string of at least 32 random characters. (from Lowcoder v2.3.x on)
133137
On linux/mac, generate one eg. with: head /dev/urandom | head -c 30 | shasum -a 256
@@ -172,6 +176,8 @@ Image can be configured by setting environment variables.
172176
| `LOWCODER_PUID` | ID of user running services. It will own all created logs and data. | `9001` |
173177
| `LOWCODER_PGID` | ID of group of the user running services. | `9001` |
174178
| `LOWCODER_API_SERVICE_URL` | Lowcoder API service URL | `http://localhost:8080` |
179+
| `LOWCODER_NODE_SERVICE_SECRET` | Secret used for encrypting communication between API service and Node service - CHANGE IT! | |
180+
| `LOWCODER_NODE_SERVICE_SALT` | Salt used for encrypting communication between API service and Node service - CHANGE IT! | |
175181

176182
## Building web frontend image
177183

‎deploy/docker/default.env

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -105,6 +105,14 @@ LOWCODER_API_SERVICE_URL="http://localhost:8080"
105105
# Lowcoder Node service URL
106106
LOWCODER_NODE_SERVICE_URL="http://localhost:6060"
107107

108+
#
109+
# ! PLEASE CHANGE THESE TO SOMETHING UNIQUE !
110+
#
111+
# Secret and salt used for encrypting comunication between API service and NODE service
112+
#
113+
LOWCODER_NODE_SERVICE_SECRET="62e348319ab9f5c43c3b5a380b4d82525cdb68740f21140e767989b509ab0aa2"
114+
LOWCODER_NODE_SERVICE_SECRET_SALT="lowcoder.org"
115+
108116
##
109117
## Frontend parameters
110118
##

‎deploy/helm/Chart.yaml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -4,10 +4,10 @@ description: A Helm chart for Kubernetes for installing lowcoder
44

55
type: application
66
# Chart version (change every time you make changes to the chart)
7-
version: 2.6.6
7+
version: 2.7.0
88

99
# Lowcoder version
10-
appVersion: "2.6.6"
10+
appVersion: "2.7.0"
1111

1212
# Dependencies needed for Lowcoder deployment
1313
dependencies:

‎deploy/helm/README.md

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -61,6 +61,8 @@ $ helm delete -n lowcoder my-lowcoder
6161
| `global.config.snapshotRetentionTime` | Lowcoder application snapshot retention time (in days) | `30` |
6262
| `global.config.marketplacePrivateMode` | Controls whether to show Apps on the local Marketplace to anonymous users | `true` |
6363
| `global.config.nodeServiceUrl` | URL to node-service server if using external one (disabled by default) | |
64+
| `global.config.nodeServiceSecret` | Secret used for encrypting traffic between API service and Node service - CHANGE IT! | |
65+
| `global.config.nodeServiceSalt` | Salt used for encrypting traffic between API service and Node service - CHANGE IT! | |
6466
| `global.config.apiServiceUrl` | URL to api-service server if using external one (disabled by default) | |
6567
| `global.cookie.name` | Name of the lowcoder application cookie | `LOWCODER_CE_SELFHOST_TOKEN` |
6668
| `global.cookie.maxAge` | Lowcoder application cookie max age in hours | `24` |

‎deploy/helm/templates/api-service/secrets.yaml

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -31,3 +31,6 @@ stringData:
3131
LOWCODER_API_KEY_SECRET: "{{ .Values.global.config.apiKeySecret }}"
3232
LOWCODER_SUPERUSER_USERNAME: {{ .Values.global.config.superuser.username | default "admin@localhost" | quote }}
3333
LOWCODER_SUPERUSER_PASSWORD: {{ .Values.global.config.superuser.password | default "" | quote }}
34+
LOWCODER_NODE_SERVICE_SECRET: {{ .values.global.config.nodeServiceSecret | default "62e348319ab9f5c43c3b5a380b4d82525cdb68740f21140e767989b509ab0aa2" | quote }}
35+
LOWCODER_NODE_SERVICE_SECRET_SALT: {{ .values.global.config.nodeServiceSalt | default "lowcoder.org" | quote }}
36+

‎deploy/helm/templates/node-service/deployment.yaml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -36,6 +36,8 @@ spec:
3636
envFrom:
3737
- configMapRef:
3838
name: {{ include "lowcoder.fullname" . }}-node-service
39+
- secretRef:
40+
name: {{ include "lowcoder.fullname" . }}-node-service
3941
ports:
4042
- name: lowcoder-node
4143
containerPort: 6060

‎deploy/helm/templates/node-service/secrets.yaml

Lines changed: 15 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,15 @@
1+
apiVersion: v1
2+
kind: Secret
3+
type: Opaque
4+
metadata:
5+
name: {{ include "lowcoder.fullname" . }}-node-service
6+
labels:
7+
{{- include "lowcoder.labels" . | nindent 4 }}
8+
{{- with .Values.annotations }}
9+
annotations:
10+
{{- toYaml . | nindent 4 }}
11+
{{- end }}
12+
stringData:
13+
LOWCODER_NODE_SERVICE_SECRET: {{ .values.global.config.nodeServiceSecret | default "62e348319ab9f5c43c3b5a380b4d82525cdb68740f21140e767989b509ab0aa2" | quote }}
14+
LOWCODER_NODE_SERVICE_SECRET_SALT: {{ .values.global.config.nodeServiceSalt | default "lowcoder.org" | quote }}
15+

‎deploy/helm/values.yaml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -31,6 +31,8 @@ global:
3131
#nodeServiceUrl:
3232
#apiServiceUrl:
3333
apiKeySecret: "5a41b090758b39b226603177ef48d73ae9839dd458ccb7e66f7e7cc028d5a50b"
34+
nodeServiceSecret: "62e348319ab9f5c43c3b5a380b4d82525cdb68740f21140e767989b509ab0aa2"
35+
nodeServiceSalt: "lowcoder.org"
3436
maxQueryTimeout: 120
3537
maxRequestSize: "20m"
3638
snapshotRetentionTime: 30

0 commit comments

Comments
 (0)
pFad - Phonifier reborn

Pfad - The Proxy pFad of © 2024 Garber Painting. All rights reserved.

Note: This service is not intended for secure transactions such as banking, social media, email, or purchasing. Use at your own risk. We assume no liability whatsoever for broken pages.


Alternative Proxies:

Alternative Proxy

pFad Proxy

pFad v3 Proxy

pFad v4 Proxy