feat(nats): resolve NATS credentials from the environment so secrets stay out of walgit.toml by yordis · Pull Request #30 · TrogonStack/walgit

feat(nats): resolve NATS credentials from the environment so secrets stay out of walgit.toml

yordis

authored

ae202c9

fix(nats): keep a blank NATS variable from shadowing real credentials

yordis

authored

9e106d3

fix(nats): read the NATS_* variables the way the nats CLI does so one environment drives both

yordis

authored

188f534

fix(nats): honour credentials in server URLs as the nats CLI does and keep them out of logs

yordis

committed

2934afc

fix(nats): refuse a file: location that is not file:// instead of truncating the path

yordis

committed

a7974fa

fix(events): keep credentials in NATS_URL out of debug output

yordis

committed

ed72096

fix(events): require TLS when NATS_CA or a client certificate is set

yordis

committed

e9f047a

test(events): pick the rustls provider the way the walgit binary does

yordis

committed

5b3e732

fix(events): refuse a lone NATS_CERT or NATS_KEY and hide passwords that hold URL delimiters

yordis

committed

abe048b

Navigation Menu

Repository navigation

feat(nats): resolve NATS credentials from the environment so secrets stay out of walgit.toml - #30

feat(nats): resolve NATS credentials from the environment so secrets stay out of walgit.toml#30
yordis merged 9 commits into
mainfrom
yordis/feat-nats-connect

Commits on Oct 27, 2026

feat(nats): resolve NATS credentials from the environment so secrets stay out of walgit.toml

fix(nats): keep a blank NATS variable from shadowing real credentials

fix(nats): read the NATS_* variables the way the nats CLI does so one environment drives both

fix(nats): honour credentials in server URLs as the nats CLI does and keep them out of logs

fix(nats): refuse a file: location that is not file:// instead of truncating the path

fix(events): keep credentials in NATS_URL out of debug output

fix(events): require TLS when NATS_CA or a client certificate is set

test(events): pick the rustls provider the way the walgit binary does

fix(events): refuse a lone NATS_CERT or NATS_KEY and hide passwords that hold URL delimiters