Julian Boldt
e51df4ba04
Release / verify (push) Canceled after 0s
CI / checks (push) Canceled after 0s
CI / frontend (push) Canceled after 0s
CI / backend (push) Canceled after 0s
Release / test (push) Canceled after 0s
Release / publish (backend) (push) Canceled after 0s
Release / publish (frontend) (push) Canceled after 0s
Release / publish (proxy) (push) Canceled after 0s
Siehe CHANGELOG.md
34 lines
842 B
Python
34 lines
842 B
Python
"""Per-host OPNsense API secret storage.
|
|
|
|
Mirrors InfraPanel's proxmox_connection.py / webhook_secret_store.py
|
|
convention: the secret never touches the database, only disk, one file per
|
|
host id, mode 0600.
|
|
"""
|
|
import uuid
|
|
from pathlib import Path
|
|
|
|
from app.config import settings
|
|
from app.services import secure_files
|
|
|
|
_SUFFIX = ".secret"
|
|
|
|
|
|
def _path(host_id: uuid.UUID) -> Path:
|
|
return Path(settings.opnsense_secret_dir) / f"{host_id}{_SUFFIX}"
|
|
|
|
|
|
def save_secret(host_id: uuid.UUID, secret: str) -> None:
|
|
path = _path(host_id)
|
|
secure_files.write_private(path, secret.strip())
|
|
|
|
|
|
def read_secret(host_id: uuid.UUID) -> str | None:
|
|
path = _path(host_id)
|
|
if not path.exists():
|
|
return None
|
|
return path.read_text().strip()
|
|
|
|
|
|
def delete_secret(host_id: uuid.UUID) -> None:
|
|
_path(host_id).unlink(missing_ok=True)
|