mirrors/searxng
1
0
Fork 0
mirror of https://github.com/searxng/searxng.git synced 2024-12-24 10:10:29 +00:00
Code Issues Projects Releases Wiki Activity

Merge pull request #2256 from kvch/force-setting-secret-key

Browse source 
Force admins to set secret_key if debug mode is disabled
This commit is contained in:
Adam Tauber 2020-10-09 18:42:39 +02:00 committed by GitHub
commit e78bfd4d8b
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
3 changed files with 7 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
searx/__init__.py
View file

@ -85,3 +85,7 @@ if 'SEARX_SECRET' in environ:
settings['server']['secret_key'] = environ['SEARX_SECRET'] settings['server']['secret_key'] = environ['SEARX_SECRET']
if 'SEARX_BIND_ADDRESS' in environ: if 'SEARX_BIND_ADDRESS' in environ:
settings['server']['bind_address'] = environ['SEARX_BIND_ADDRESS'] settings['server']['bind_address'] = environ['SEARX_BIND_ADDRESS']
if not searx_debug and settings['server']['secret_key'] == 'ultrasecretkey':
logger.error('server.secret_key is not changed. Please use something else instead of ultrasecretkey.')
exit(1)

2
searx/settings_robot.yml
View file

@ -8,7 +8,7 @@ search:
server: server:
port : 11111 port : 11111
bind_address : 127.0.0.1 bind_address : 127.0.0.1
secret_key : "ultrasecretkey" # change this! secret_key : "changedultrasecretkey"
base_url : False base_url : False
http_protocol_version : "1.0" http_protocol_version : "1.0"

2
tests/__init__.py
View file

@ -0,0 +1,2 @@
import os
os.environ['SEARX_DEBUG'] = '1'