Secure Credential Storage on Gateway
The Gateway by default loads configurations from environment variables, including an .env file.
If you have a solution in place to securely store environment variables, you can use that.
We offer the option to securely store secret keys needed for API authentication as follows.
Storing Client Secret
The client secret key is used by the Dashboard and Windows Ingestion Service to connect to the gateway internal API. This guide shows how to securely store the Client Secret on the Gateway.
Ensure “ClientSecret” is empty or not present in docker.env.
Run
docker exec -it gateway_api_container python manage_api_keys.pySelect 1 Store Gateway ClientSecret (Quick Setup)
Enter desired Client Secret.
Recreate docker containers to restart
docker compose down
docker compose up -d