zerod/assets/ at d0317dfb7e11bdf1bbd3bdb37ef5306ebf455d5d · tsiry-sandratraina.com/zerod · Tangled

tsiry-sandratraina.com / zerod

0

Headless Rust gRPC daemon to drive Bluetooth, HLS/DASH playback, and snapcast/shairport-sync/squeezelite on Raspberry Pi audio rigs.

0

zerod / assets

1 file

at d0317dfb7e11bdf1bbd3bdb37ef5306ebf455d5d

Tsiry Sandratraina service install: pin a random bearer token in the unit file 6w ago

zerod.service.in

service install: pin a random bearer token in the unit file The previous template left ZEROD_BEARER_TOKEN unset, which meant zerod would generate a new random token on every restart and log it once — unworkable for any client that wants a stable token, and easy to miss in the journal. Now `zerod service install`: - generates a 32-byte hex token via getrandom (or accepts --token <v>), - substitutes it into Environment=ZEROD_BEARER_TOKEN= in the unit, - writes the file mode 0600 so other users can't read the secret, - prints the token to stdout with the client-side ZEROD_BEARER_TOKEN export to copy-paste. Re-running with --force rotates the token (unless --token is supplied); without --force the install errors out so an in-flight client doesn't silently break. Also fixes Documentation= URL to point at the actual repo (tangled.org/tsiry-sandratraina.com/zerod).

1 month ago