From 17bc82db85d30ef2c08524381ba3537cb6b39191 Mon Sep 17 00:00:00 2001
From: Bill Church <billchurch@users.noreply.github.com>
Date: Wed, 21 Aug 2024 17:44:15 +0000
Subject: [PATCH] feat: get HTTP session secret from `WEBSSH_SESSION_SECRET`
 env if available.

---
 app/config.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/app/config.js b/app/config.js
index 4272648..ccc34ab 100644
--- a/app/config.js
+++ b/app/config.js
@@ -62,7 +62,7 @@ const defaultConfig = {
     compress: ["none", "zlib@openssh.com", "zlib"]
   },
   session: {
-    secret: generateSecureSecret(),
+    secret: process.env.WEBSSH_SESSION_SECRET || generateSecureSecret(),
     name: "webssh2.sid"
   }
 }