NS8 MintHCM App

[mrmarkuz (Markus Neuberger)]

Most apps are rootless, only expose ports via traefik and there’s also selinux. Here are more details:

Better Secrets Management for NS8 Apps

MAjority of the app that we have on NS8 do have their database and othe rpasswords exposed in the source code of the given module, either on the services files, or in the configure module files. Majority of the application than have requirements for a secret key, or some encryption, we do generate this at runtime or during installation. While this is a feasible option, it may not be viable for things like database username and password. Equally, a User might have the need to retrive and make …