From 9e262d84de61994527ceab69ab87525184f422ba Mon Sep 17 00:00:00 2001
From: Tommy van der Vorst <tommy@pixelspark.nl>
Date: Thu, 4 Sep 2025 20:22:59 +0200
Subject: [PATCH] fix(api): redact device encryption passwords in support
 bundle config (#10359)

* fix(api): redact device encryption passwords in support bundle config

Signed-off-by: Tommy van der Vorst <tommy@pixelspark.nl>

* Update lib/api/support_bundle.go

Signed-off-by: Jakob Borg <jakob@kastelo.net>

---------

Signed-off-by: Tommy van der Vorst <tommy@pixelspark.nl>
Signed-off-by: Jakob Borg <jakob@kastelo.net>
Co-authored-by: Jakob Borg <jakob@kastelo.net>
---
 lib/api/support_bundle.go | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/lib/api/support_bundle.go b/lib/api/support_bundle.go
index 102c38312..97efa69ae 100644
--- a/lib/api/support_bundle.go
+++ b/lib/api/support_bundle.go
@@ -23,6 +23,15 @@ func getRedactedConfig(s *service) config.Configuration {
 	if rawConf.GUI.User != "" {
 		rawConf.GUI.User = "REDACTED"
 	}
+
+	for folderIdx, folderCfg := range rawConf.Folders {
+		for deviceIdx, deviceCfg := range folderCfg.Devices {
+			if deviceCfg.EncryptionPassword != "" {
+				rawConf.Folders[folderIdx].Devices[deviceIdx].EncryptionPassword = "REDACTED"
+			}
+		}
+	}
+
 	return rawConf
 }