Comments (3)
It shouldn't be hard to do. Extending the client configuration to be able to change parameters like keys or IPs and save them. Not having the private key would make the download of a ready to use file impossible tough.
from subspace.
I agree that it impacts the one-stop shop, but it keeps the private keys where they were intended to be - on the device.
I don't see a reason to not support both use cases.
An alternative might be to destroy the private keys (securely) after they were used. That would mean that any subsequent update to the client's configuration would need a new private key generated, but that's probably good practice anyway (making it automatic/easy to rotate device keys - which is something I think tailscale does)
from subspace.
I've been wondering about this. I don't want to have to issue all new keys if someone in systems leaves as they'll have had access to all the private keys. I've tested it out it doesn't blow up so I think I'll put a cronjob in place to run sudo perl -pi -e 's/PrivateKey = .*/PrivateKey = YOU MUST MAKE A NEW PROFILE IF YOU LOST YOUR KEY/' *.conf
from subspace.
Related Issues (20)
- --http-addr won't use ports >1023 HOT 2
- Suggestion: Linux & MacOS devices should have "PersistentKeepalive" in their profiles HOT 1
- Corrections to README to account for existing bugs, at least until addressed? HOT 2
- NAT_ENABLED error reported when set to false HOT 2
- Guidance needed, SAML and keycloak HOT 1
- Question: HA and user sync on SAML HOT 2
- Idea: custom DNS entries in the wg0.conf output; instead of the dnsmasq-forwarded DNS? HOT 1
- login does not continue past /signin HOT 2
- Make a new release? HOT 2
- Button to regenerate conf files? HOT 1
- DNS generation problem
- Terraform module implemented HOT 1
- Subspace webUI not listening on IPv4 address HOT 2
- SAML error with Jumpcloud HOT 3
- Custom ENV options not working correctly HOT 3
- dnsmasq config gets generated on each restart
- The container keeps restarting
- Static Route support HOT 1
- SSL_ERROR_INTERNAL_ERROR_ALERT HOT 1
- Abadonware?
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from subspace.