[feature] Better deployment configuration options

[dploeger]

Version and OS
0.40.3 on Kubernetes with the help of this helm chart

Is your feature request related to a problem? Please describe.
We're running an automated deployment of changedetection.io on our on-premise Kubernetes cluster. We basically only need to set a system password and disable the version check. Through source code digging, we found that the password needs to be a (complexly hashed) environment value of SALTED_PASS and we hacked disabling the version check by setting the env GITHUB_REF to some bogus value.

Describe the solution you'd like
The available configuration options should be documented to completely automate the setup of the application. I guess, mostly the Flask environment configuration methods will help here, but a documented list of available configuration options would be great.

As for the version check: Apparently it's currently not supported to be disabled at all (other than workflows and tests). We depend on the Helm chart for deployment and the chart defines the support app version. While we could override this, we'd like to run the chart-supported version. So enabling to configure it would be great as well. Thanks!

[dgtlmoon]

Heya

The password you can use is a fairly common method, does this help?

    password = "some known text"
    # Make a new salt on every new password and store it with the password
    salt = secrets.token_bytes(32)
    key = hashlib.pbkdf2_hmac('sha256', password.encode('utf-8'), salt, 100000)
    store = base64.b64encode(salt + key).decode('ascii')

[dploeger]

I guess the best way would be to implement the encryption in the container entrypoint script. Sadly tools like Terraform or Helm only implement a rather small set of encryption possibilities (e.g.: https://developer.hashicorp.com/terraform/language/functions/base64sha256)

They usually rely on passing on environment values or creating k8s secrets with the value that can be used in the container.

[milksteakjellybeans]

As for the version check: Apparently it's currently not supported to be disabled at all (other than workflows and tests). We depend on the Helm chart for deployment and the chart defines the support app version. While we could override this, we'd like to run the chart-supported version. So enabling to configure it would be great as well. Thanks!

I'm also interested in a way to disable the version check

[dgtlmoon]

Yeah I'll include some env var to set in the next release, nice idea