bridge/config.yaml at b3cbd87d0e2592aed5446f265ccae3a709d73bd6

mirror of https://github.com/luxfi/bridge.git synced 2026-09-24 00:26:46 +00:00

Files

T

zeekay 7e582faaf3 security: remove plaintext MPC badger password from config.yaml

C4 remediation: the MPC database password was stored as plaintext in
the tracked config.yaml file. Replaced with placeholder — production
reads the rotated secret via ZAPDB_PASSWORD from K8s bridge-secrets.

2026-03-19 01:15:18 -07:00

14 lines

450 B

YAML

Raw Blame History

 nats:
   url: nats://127.0.0.1:4223
 consul:
   address: localhost:8500
 mpc_threshold: 2
 environment: local # Options: mainnet, testnet, local
 badger_password: "REPLACE_FROM_KMS" # Set via ZAPDB_PASSWORD env var in production
 event_initiator_pubkey: "c3f3511cd2f849fd61e81ea62a842fd33367ee8fb5b867bb900877c7fb72ce3b"
 max_concurrent_keygen: 2
 db_path: "./data/mpc"
 backup_enabled: true
 backup_period_seconds: 300 # 5 minutes
 backup_dir: ./data/backups

14 lines 450 B YAML Raw Blame History

14 lines

450 B

YAML

Raw Blame History