Ethica/Termix
1
0
Fork 0
mirror of https://github.com/Termix-SSH/Termix.git synced 2026-08-29 18:31:33 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat: 1Password Connect secret sources for SSH credentials (#1341)

Browse Source 
* feat: 1Password Connect secret sources for SSH credentials

Hosts and credentials can hold op://vault/item/field references instead
of secrets; they are resolved at connect time from the user's secret
source (1Password Connect) at the single point where every subsystem
receives plaintext credentials, so terminal, SFTP, Docker, metrics and
tunnels all work without per-subsystem changes. Sources are per user,
optionally shared, with the access token encrypted under the owner's
data key; resolved values are cached briefly in memory.

* style: format secret source changes
This commit is contained in:
ZacharyZcR
2026-08-25 03:06:37 +08:00
committed by GitHub
parent 32d77fc6d0
commit 5f55289e00
34 changed files with 28148 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/ui/locales/en.json
+19
View File
@@ -888,6 +888,22 @@
"selectAVaultProfile": "Select a Vault profile...",
"vaultProfileHint": "Settings come from the shared profile; you'll sign in to Vault via OIDC when you connect. No secrets are stored.",
"vaultNewProfile": "New profile",
"secretRefHint": "You can paste a 1Password reference (op://vault/item/field) instead of the secret; it is fetched from your secret source when connecting.",
"secretSourcesManage": "Manage secret sources",
"secretSourcesTitle": "Secret sources",
"secretSourcesDesc": "External password managers Termix reads secrets from at connect time. Currently 1Password Connect (self-hosted). The access token is stored encrypted with your data key.",
"secretSourceNew": "New source",
"secretSourceUrlLabel": "Connect server URL",
"secretSourceTokenLabel": "Connect access token",
"secretSourceTokenKeep": "Leave empty to keep the current token",
"secretSourceSharedLabel": "Share with all users (admins only; resolves while you are signed in)",
"secretSourceShared": "shared",
"secretSourceTest": "Test",
"secretSourceTestOk": "Connected — {{count}} vault(s) visible",
"secretSourceTestFailed": "Connection test failed",
"secretSourceRequired": "Name, server URL and token are required",
"secretSourceSaved": "Secret source saved",
"secretSourceDeleted": "Secret source deleted",
"vaultManageProfiles": "Manage Vault profiles",
"vaultAddrLabel": "Vault Address",
"vaultNamespaceLabel": "Namespace",
@@ -3700,6 +3716,9 @@
"stepCaProvisioner": "OIDC provisioner name",
"stepCaSaved": "Step CA settings saved",
"stepCaSaveFailed": "Failed to save Step CA settings",
"secretSourcePrivateEndpoints": "Allowed private secret source hosts",
"secretSourcePrivateEndpointsDesc": "Private hosts that secret sources (1Password Connect) may contact. Separate them with commas.",
"updateSecretSourceEndpointsFailed": "Failed to update the secret source endpoint allowlist",
"stepCaPrivateEndpoints": "Allowed private Step CA hosts",
"stepCaPrivateEndpointsDesc": "Private hosts the Step CA certificate flow may contact: the CA itself and, if internal, your identity provider. Separate them with commas.",
"updateStepCaEndpointsFailed": "Failed to update the Step CA endpoint allowlist",