services: cloudflare-tunnel: Set token in environment variable.

* rosenthal/services/child-error.scm (cloudflare-tunnel-shepherd-service)
[start]<#:environment-variables>: Set token here to avoid seeing it in `ps'.
This commit is contained in:
Hilton Chain 2023-07-29 18:59:31 +08:00
parent 2ba2f5a117
commit 62db72e49f
No known key found for this signature in database
GPG Key ID: ACC66D09CA528292

View File

@ -170,7 +170,6 @@ headers. This can expose sensitive information in your logs.")
#$@extra-tunnel-options
"run"
"--token" #$token
#$@(if http2-origin?
'("--http2-origin")
'())
@ -180,7 +179,9 @@ headers. This can expose sensitive information in your logs.")
#$@extra-options)
#:user "nobody"
#:group "nogroup"
#:log-file #$log-file))
#:log-file #$log-file
#:environment-variables
(list (format #f "TUNNEL_TOKEN=~a" #$token))))
(stop #~(make-kill-destructor)))))))
(define cloudflare-tunnel-service-type