mirror of
https://github.com/kopia/kopia.git
synced 2026-02-02 18:54:15 -05:00
This automatically launches Kopia CLI with new flags: `--tls-generate-cert` which generates in-memory TLS certs for the server and prints its fingerprint to stderr. `--random-password` which sets up random base auth password KopiaUI will then listen to the stderr messages and parse the cert fingerprint and password and automatically provide them in the browser it opens to show the UI. This ensures that any local process (or script in a browser, etc.) other than KopiaUI itself won't have access to the server API nor UI because they won't know the ephemeral random password and won't be able to intercept it due to TLS protection.