summaryrefslogtreecommitdiff
path: root/cmd
diff options
context:
space:
mode:
Diffstat (limited to 'cmd')
-rw-r--r--cmd/server/main.go7
1 files changed, 6 insertions, 1 deletions
diff --git a/cmd/server/main.go b/cmd/server/main.go
index 461278c..c97dbdd 100644
--- a/cmd/server/main.go
+++ b/cmd/server/main.go
@@ -139,7 +139,12 @@ func main() {
// --- Main Application Proxy ---
proxyHandler := handlers.NewProxy(targetURL)
- // --- CSRF Protection (for Web UI) ---
+ // --- Secret Key Validation ---
+ sessionSecret := os.Getenv("SESSION_SECRET")
+ if sessionSecret == "" {
+ logging.AppLog.Warn("SESSION_SECRET environment variable not set. Using default key. THIS IS NOT SAFE FOR PRODUCTION.")
+ sessionSecret = "default-secret-key-for-dev"
+ }
csrfSecret := os.Getenv("CSRF_SECRET_KEY")
if csrfSecret == "" {
logging.AppLog.Error("CSRF_SECRET_KEY environment variable not set")