how to manage my password in client's machine reddit / selfhosted ---------------------------------------------------------------------- gojustforfun · 2023-10-31 14:33 This question may not belong here. But people here can help. I backup files for clients. After it is done, I run a power shell script to email clients and myself that backup is completed. Problem is that I have to put an email login/password in that script in order to do that. Obviously, this is not a perfect solution. Any suggestions? Thanks, ---------------------------------------------------------------------- thekrautboy · 2023-10-31 14:44 Look at "secrets" managers... https://www.reddit.com/r/selfhosted/search?q=secrets&restrict_sr=on ---------------------------------------------------------------------- thegreatincognitum · 2023-10-31 15:01 Do you have a server? You could send an API call from the script and have the server send the email. ---------------------------------------------------------------------- gojustforfun · 2023-10-31 15:17 then the question become how to secure API call to the server? I still need some type of token/password to make that API call. ---------------------------------------------------------------------- Legitimate_Farm_3095 · 2023-10-31 15:17 > This question may not belong here. But people here can help. it doesn't belong here, and just because people here might be able to help doesn't mean it's ok to post it here. thats how the qualiity of the sub goes down when off topic threads are started just because ---------------------------------------------------------------------- tech2but1 · 2023-10-31 16:10 Ironic that your poor grammar is an example of how accepting piss poor submissions just makes it acceptable for people to half arse things. ---------------------------------------------------------------------- tech2but1 · 2023-10-31 16:11 Then we're all out of ideas. You want to send email using no credentials or keys at all? Impossible. ---------------------------------------------------------------------- thegreatincognitum · 2023-10-31 16:32 But it doesn't expose the email account credentials, so the scope of potential abuse is limited. 🤷‍♀️ idk what to tell you dude, why don't you hire a crack team of mercenary commandos to fly around the world and take out anyone who would even think about exploiting your email account, and then don't worry about it anymore? ---------------------------------------------------------------------- Legitimate_Farm_3095 · 2023-10-31 17:01 lol. low effort ---------------------------------------------------------------------- zoredache · 2023-10-31 17:16 Tempted to say this might be a case for running your own mail server. Perhaps as an outbound-only relay. Create a unique account per client. ---------------------------------------------------------------------- zoredache · 2023-10-31 17:21 Run a email relay. Not a full blown mail server. On your relay, create unique per-client or per-system credentials. Client bob only gets the client bob password. If someone abuses something, then you can look at your logs and delete/reset the account. There are lots of 3rd party email relays you could use. Some might offer the ability to create a bunch of unique credentials, possibly for an additional cost. Again, 1 credential per client, and they will often offer logging per credential and ability to invalidate that credential when abused. ---------------------------------------------------------------------- zoredache · 2023-10-31 17:32 Don't really think a secret manager is really the best answer, or maybe it isn't a complete answer. Even with a secrets manager, you should strongly avoid having a single shared account used by lots of separate clients if at all possible. Whenever possible, each separate entity should have an unique credential. ---------------------------------------------------------------------- thekrautboy · 2023-10-31 17:42 Absolutely yes. But that doesnt seem to be the concern of OP, they seem to be mostly worried about leaving any credentials on client machines. A secret manager would (typically) store them encrypted and only inject them when required. Is that a perfect setup? No. Imo OP clearly lacks some knowledge on how things like that should be done, but they asked for storing credentials on clients, so yeah. ---------------------------------------------------------------------- trisanachandler · 2023-10-31 17:56 Webhooks? Maybe include the PC name in the payload? ---------------------------------------------------------------------- gojustforfun · 2023-10-31 22:47 Thanks. This is most reasonable solution so far. ---------------------------------------------------------------------- Sow-pendent-713 · 2023-11-01 00:29 This is the way ---------------------------------------------------------------------- xkcd__386 · 2023-11-01 06:06 if the message itself is not important/sensitive, or can be suitably obfuscated without loss, use ntfy.sh - pick a word. Let's say `Quei3Oju` - install ntfy.sh app on your phone, and subscribe to the channel `Quei3Oju` - send messages from the server using `curl -d "Backup successful" ntfy.sh/Quei3Oju` no passwords, no secrets. Risk: anyone who knows that word (or the operator of ntfy.sh) can see your messages. Hence why the point about sensitivity of the message itself ---------------------------------------------------------------------- gojustforfun · 2023-11-01 14:21 This is a better one. Thanks! ---------------------------------------------------------------------- kmisterk · 2023-11-06 18:47 ## Post Removed Hey, gojustforfun! Thanks for your submission on selfhosted. Your post has been removed due to a violation of the purpose of the subreddit: **Self Hosting** ## Not Self-Hosted When it comes to posts regarding applications in this subreddit, they must feature a self-hosted tool, or a tool that *can be* self-hosted, or some kind of related information, help request, or otherwise related to a tool that is something that one can self-host. If you believe this post *is in fact* relevant to /r/selfhosted, feel free to [message the mods](https://www.reddit.com/message/compose/?to= /r/selfhosted&subject=Removed For Not Being Self- Hosted&message=[Removed Post](https://www.reddit.com/r/selfhosted/comments/17kmg3p/-/\)) with your concerns.