[LOW] WireGuard public keys committed to repository #28

New issue

Open

opened 2026-05-05 15:45:01 -05:00 by pjennings · 0 comments

pjennings commented

2026-05-05 15:45:01 -05:00

Owner

Labels: area:security, area:network, priority:low, type:enhancement

Description

All WireGuard public keys for the mesh network are committed in modules/profiles/meshNetwork/meshTopology.nix. While public keys are not secret by design, publishing them reveals the mesh topology and all peer relationships.

Impact

Information disclosure of internal network structure. Low risk if repository is private.

Recommended Fix

Acceptable if repository is private. If public, consider moving keys to secrets management.

**Labels:** area:security, area:network, priority:low, type:enhancement ## Description All WireGuard public keys for the mesh network are committed in modules/profiles/meshNetwork/meshTopology.nix. While public keys are not secret by design, publishing them reveals the mesh topology and all peer relationships. ## Impact Information disclosure of internal network structure. Low risk if repository is private. ## Recommended Fix Acceptable if repository is private. If public, consider moving keys to secrets management.