This pretty posting pretty well spells it out, currently, data like the user/pw for add-on’s like Samba or MQTT are shown as clear text in the web interface. It would be really good to move or hide this information. Something like what was done for getting this type of info out of the yaml files for HA.
is there any info about that ?
i also would like to point to !secret from add-on config like configurator.
You can use this for Node-Red but not for other addons so not sure if this is something that needs to be implemented on the addon end?
If so would it affect the security rating of the addon as I would imagine having access to the !secrets file would in itself pose a security risk?
