nix is supposed to produce reproducible builds. however i am not aware of an option to set the copyparty salt, which, from what i understand, is otherwise machine-specific
the readme suggests it is possible to view and change the salt:
inspecting the generated salt using --show-ah-salt in copyparty service configuration
setting the same --ah-salt in both environments
however this is imperative/manual, not automatic/declarative. also, even if i could set it using this argument in my nix config, (e.g. maybe i can set it in services.copyparty.settings since afaik that just transfers to cli keyword args), it would be insecure since the salt would be exposed publicly. is it possible to encrypt it (using agenix or similar) so that you can secure and declarative password hash salts, so that you dont need to store encrypted passwords, but rather can use encrypted (or not) password hash values.
the reason why i am asking about this is because i am migrating my old copyparty config (which i had on termux) to an nix-based config, however all my passwords were stored as hashed values. preferrably i would like to transfer these passwords without having to ask for the passwords again (and since they are not hashed, but rather encrypted with agenix, i would be able to view to plaintext myself at any time, which is insecure to an extent).
nix is supposed to produce reproducible builds. however i am not aware of an option to set the copyparty salt, which, from what i understand, is otherwise machine-specific
the readme suggests it is possible to view and change the salt:
however this is imperative/manual, not automatic/declarative. also, even if i could set it using this argument in my nix config, (e.g. maybe i can set it in
services.copyparty.settingssince afaik that just transfers to cli keyword args), it would be insecure since the salt would be exposed publicly. is it possible to encrypt it (using agenix or similar) so that you can secure and declarative password hash salts, so that you dont need to store encrypted passwords, but rather can use encrypted (or not) password hash values.the reason why i am asking about this is because i am migrating my old copyparty config (which i had on termux) to an nix-based config, however all my passwords were stored as hashed values. preferrably i would like to transfer these passwords without having to ask for the passwords again (and since they are not hashed, but rather encrypted with agenix, i would be able to view to plaintext myself at any time, which is insecure to an extent).