Stop Putting Your UniFi Admin Password in an Env Var

There’s a command line in the gofi post I wrote ten days ago that has been quietly bugging me ever since I hit publish: gofips -H 10.20.30.1 -k --get > hosts.conf Look at that -k. That’s me telling the tool “don’t bother checking the TLS certificate.” And the part you can’t see is worse: my UniFi admin username and password, sitting in environment variables. Both of those were compromises I made to get the thing working. Neither of them sat well.