fix: change SFTP host key verification default to secure (False)
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
This commit is contained in:
+3
-3
@@ -107,9 +107,9 @@ class Settings(BaseSettings):
|
||||
sftp_folder: Optional[str] = None
|
||||
sftp_private_key: Optional[str] = None
|
||||
sftp_private_key_passphrase: Optional[str] = None
|
||||
# Security: Disable host key verification only in development/testing environments
|
||||
# In production, set to True and configure known_hosts file
|
||||
sftp_disable_host_key_verification: bool = True # Default allows connection without known_hosts
|
||||
# Security: Host key verification is enabled by default for security
|
||||
# In development/testing, set to True to disable verification (not recommended)
|
||||
sftp_disable_host_key_verification: bool = False # Default enforces host key verification
|
||||
|
||||
# Email settings
|
||||
email_host: Optional[str] = None
|
||||
|
||||
Reference in New Issue
Block a user