Rafael Dias Zendron f8a3561f1e fix(backup): redact S3 credentials from logs and error output (#4648) ...

* fix(backup): redact S3 credentials from logs and error output (#4621)

S3 backup credentials (access key + secret) were logged in plaintext
to Dokploy service stdout via logger.info in getBackupCommand() and
console.error in keepLatestNBackups(). Any operator with access to
service logs could recover S3 credentials.

Added redactRcloneCredentials() pure function that masks
--s3-access-key-id and --s3-secret-access-key values with [REDACTED].
Applied to both the structured logger call and the error handler.

Closes #4621

* fix(backups): redact sensitive information in error logs during web server backup process

Updated error handling in the web server backup function to redact Rclone credentials from error messages before logging and notification. This change enhances security by preventing sensitive data exposure in logs.

---------

Co-authored-by: Mauricio Siu <siumauricio@icloud.com>

2026-07-05 16:52:03 -06:00

..

api

Feat/tailwind v4 shadcn update (#4706)

2026-06-30 15:45:23 -06:00

dokploy

fix(backup): redact S3 credentials from logs and error output (#4648)

2026-07-05 16:52:03 -06:00

monitoring

fix: enhance container metrics query to support wildcard matching for container names

2026-03-08 16:16:45 -06:00

schedules

Feat/tailwind v4 shadcn update (#4706)

2026-06-30 15:45:23 -06:00