<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>Api on Greg Herlein</title>
    <link>https://blog.herlein.com/tags/api/</link>
    <description>Recent content in Api on Greg Herlein</description>
    <generator>Hugo</generator>
    <language>en</language>
    <copyright>&amp;copy; 2018-2026. All rights reserved.</copyright>
    <lastBuildDate>Sun, 26 Jul 2026 00:00:01 -0800</lastBuildDate>
    <atom:link href="https://blog.herlein.com/tags/api/index.xml" rel="self" type="application/rss+xml" />
    <item>
      <title>Stop Putting Your UniFi Admin Password in an Env Var</title>
      <link>https://blog.herlein.com/post/gofi-api-keys/</link>
      <pubDate>Sun, 26 Jul 2026 00:00:01 -0800</pubDate>
      <guid>https://blog.herlein.com/post/gofi-api-keys/</guid>
      <description>&lt;p&gt;There&amp;rsquo;s a command line in the &lt;a href=&#34;https://blog.herlein.com/post/gofi-static-dhcp-leases/&#34;&gt;gofi post&lt;/a&gt; I wrote ten days ago that has been quietly bugging me ever since I hit publish:&lt;/p&gt;&#xA;&lt;div class=&#34;highlight&#34;&gt;&lt;pre tabindex=&#34;0&#34; style=&#34;color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;&#34;&gt;&lt;code class=&#34;language-bash&#34; data-lang=&#34;bash&#34;&gt;&lt;span style=&#34;display:flex;&#34;&gt;&lt;span&gt;gofips -H 10.20.30.1 -k --get &amp;gt; hosts.conf&#xA;&lt;/span&gt;&lt;/span&gt;&lt;/code&gt;&lt;/pre&gt;&lt;/div&gt;&lt;p&gt;Look at that &lt;code&gt;-k&lt;/code&gt;. That&amp;rsquo;s me telling the tool &amp;ldquo;don&amp;rsquo;t bother checking the TLS certificate.&amp;rdquo; And the part you &lt;em&gt;can&amp;rsquo;t&lt;/em&gt; see is worse: my UniFi admin username and password, sitting in environment variables. Both of those were compromises I made to get the thing working. Neither of them sat well.&lt;/p&gt;</description>
    </item>
  </channel>
</rss>
