Initial secret is hardcoded

[plwhite]

When clearwater is started, ellis has a default secret of "secret". There is no way to change that value (and it is clearly insecure). There should be a documented way to change it.

[richardwhiuk]

Do you mean the signup key? Is there any reason you can't follow the process in http://clearwater.readthedocs.io/en/stable/Clearwater_Configuration_Options_Reference.html to change the signup key?

[plwhite]

@richardwhiuk Interesting - I hadn't found that document, thanks.

How do I change the values in the configuration files in a Docker deployment? Is there a procedure, or do I just have to change values in all my images? I could in principle get access to each container and hack about with files in it, but that isn't very clean (when an instance restarts, the changes would be lost, for example, and it's error prone).

[eleanor-merry]

Ported to Metaswitch/project-clearwater-issues#11