All apps · 0 apps

OneTimeSecret

Docker app from CorneliousJD's Repository

Overview

Containerized OneTimeSecret with customization, and without paid/account features. Just simple, secure password sharing. Keep sensitive info (passwords) out of your email & chat logs. Requires Redis container with a password set on it! See support thread for more information.

Readme

View on GitHub

One Time Secret Docker Image

This repository is a fork of th awesome project onetimesecret (https://onetimesecret.com/).

Differences from the original

Containerized (Docker image)
Deployable on Kubernetes and OpenShift
No accounts and paid features, just secret sharing
Customizable for your project/company (through environment variables)

Image details

Base image: ruby:2.6-buster (official image from Docker Hub)
This image is designed to run on Kubernetes/OpenShift together with a REDIS container in a pod (see examples).
The container can and should be run unprivileged (leveraging the OCP arbitrary user ID feature).
Pre build docker images:
hub.docker.com siw36/onetimesecret
quay.io siw36/onetimesecret

Variables

Name	Description	Default value
OTS_DOMAIN	The domain name, which points to this instance	<none - required to be set>
OTS_MASTER_KEY	Global secret (gets combined with the users key to encrypt the secret)	<none - required to be set>
OTS_REDIS_PW	Password for REDIS access	<none - required to be set>
OTS_REDIS_HOST	The hostname or IP address of the REDIS instance	<none - required to be set>
OTS_REDIS_PORT	The port of the REDIS instance	<none - required to be set>
OTS_SSL	Use SSL or not	true
OTS_CREATE_SECRET		250
OTS_CREATE_ACCOUNT		10
OTS_UPDATE_ACCOUNT		10
OTS_EMAIL_RECIPIENT		50
OTS_SEND_FEEDBACK		10
OTS_AUTHENTICATE_SESSION		5
OTS_HOMEPAGE		500
OTS_DASHBOARD		1000
OTS_FAILED_PASSPHRASE		5
OTS_SHOW_METADATA		1000
OTS_SHOW_SECRET		1000
OTS_BURN_SECRET		1000
OTS_IMAGE_FAV_ICON	link to the custom icon (png)	<none - defaults to the original icon>
OTS_IMAGE_LOGO	link to the custom logo (png)	<none - defaults to the original logo>
OTS_COLOR	CSS color code (#XXXXXX)	#dd4a22

OpenShift specifics

Attach the default pull secret to the ots service account

oc secrets link ots <pull secret here> --for=pull

Make sure to use the OCP oauth proxy for your current cluster version registry.redhat.io/openshift4/ose-oauth-proxy:v4.X

OpenShift deployment config

You can find an example template for OTS on OCP in the examples folder.

Install OneTimeSecret on Unraid in a few clicks.

Find OneTimeSecret in Community Apps on your Unraid server, review the template, and click Install. Unraid handles the Docker app or plugin setup from the published template.

Open the Apps tab on your Unraid server Search Community Apps for OneTimeSecret Review the template variables and paths Click Install

Explore Unraid OS

Requirements

Redis container installed

Related apps

Explore more like this

Explore all

Productivity Security Utilities apps

Links

Projectgithub.com Supportforums.unraid.net Docker Hubhub.docker.com Templateraw.githubusercontent.com

Details

Repository

siw36/onetimesecret

Registry

https://hub.docker.com/r/siw36/onetimesecret/

Last Updated2021-11-26

First Seen2021-03-19

Runtime arguments

Web UI: http://[IP]:[PORT:7143]
Network: bridge
Shell: sh
Privileged: false

Template configuration

Web Interface PortPorttcp

Container Port: 7143

Target: 7143
Default: 7143
Value: 7143

OTS_DOMAINVariable

Domain/host for generated links, either IP:7134 or sub.domain.com

Default: onetime.domain.com
Value: onetime.domain.com

OTS_MASTER_KEYVariable

Please change to a randomly generated value for encryption.

Value: CHANGEME

OTS_REDIS_HOSTVariable

Redis host address.

OTS_REDIS_PORTVariable

Redis port number.

Default: 6379
Value: 6379

OTS_REDIS_PWVariable

Redis password, which is required.

OTS_IMAGE_FAV_ICONVariable

Optional link to a favicon.ico file.

OTS_IMAGE_LOGOVariable

Optional link to a logo file.

OTS_COLORVariable

Change the color theme of the web interface.

Default: #DD4A22
Value: #DD4A22

OTS_SSLVariable

Changes how URLs are generated, with HTTPS or without (set to true for use behind reverse proxy!)

Default: false
Value: false

Library

Curated

Categories