diff options
| author | haturatu <taro@eyes4you.org> | 2025-10-13 02:16:20 +0900 |
|---|---|---|
| committer | haturatu <taro@eyes4you.org> | 2025-10-13 02:16:20 +0900 |
| commit | 6f19c4dcb7702f002d2a1b579f2418e1bc10b18f (patch) | |
| tree | 1fefd40cba9868141e7554e6b59269a341dd00c8 /cmd/server | |
| parent | 1d4b4c0207d7a409d19a32c4f25e8ce68f880c08 (diff) | |
ref(env): config.go
Diffstat (limited to 'cmd/server')
| -rw-r--r-- | cmd/server/main.go | 7 |
1 files changed, 6 insertions, 1 deletions
diff --git a/cmd/server/main.go b/cmd/server/main.go index 461278c..c97dbdd 100644 --- a/cmd/server/main.go +++ b/cmd/server/main.go @@ -139,7 +139,12 @@ func main() { // --- Main Application Proxy --- proxyHandler := handlers.NewProxy(targetURL) - // --- CSRF Protection (for Web UI) --- + // --- Secret Key Validation --- + sessionSecret := os.Getenv("SESSION_SECRET") + if sessionSecret == "" { + logging.AppLog.Warn("SESSION_SECRET environment variable not set. Using default key. THIS IS NOT SAFE FOR PRODUCTION.") + sessionSecret = "default-secret-key-for-dev" + } csrfSecret := os.Getenv("CSRF_SECRET_KEY") if csrfSecret == "" { logging.AppLog.Error("CSRF_SECRET_KEY environment variable not set") |