From 78398b852c1179b5f14231c2f6f1b6db64399c35 Mon Sep 17 00:00:00 2001
From: Thomas Hintz <t@thintz.com>
Date: Wed, 22 Apr 2026 11:29:29 -0700
Subject: [PATCH] Properly use form password type for api keys.

---
 src/nassella.scm | 22 +++++++++++++++-------
 1 file changed, 15 insertions(+), 7 deletions(-)

diff --git a/src/nassella.scm b/src/nassella.scm
index ab83c74..a3b328d 100644
--- a/src/nassella.scm
+++ b/src/nassella.scm
@@ -891,17 +891,25 @@ chmod -R 777 /opt/keys")))
        (VStack
         (Fieldset
          (@ (title "Cloudflare"))
-         (Field (@ (name "cloudflare-api-token") (label ("API Token")) (value ,(alist-ref 'cloudflare-api-token config))))
-         (Field (@ (name "cloudflare-zone-id") (label ("Zone ID")) (value ,(alist-ref 'cloudflare-zone-id config))))
-         (Field (@ (name "cloudflare-account-id") (label ("Account ID")) (value ,(alist-ref 'cloudflare-account-id config)))))
+         (Field (@ (name "cloudflare-api-token") (label ("API Token")) (type "password")
+                   (value ,(alist-ref 'cloudflare-api-token config))))
+         (Field (@ (name "cloudflare-zone-id") (label ("Zone ID")) (type "password")
+                   (value ,(alist-ref 'cloudflare-zone-id config))))
+         (Field (@ (name "cloudflare-account-id") (label ("Account ID")) (type "password")
+                   (value ,(alist-ref 'cloudflare-account-id config)))))
         (Fieldset
          (@ (title "DigitalOcean"))
-         (Field (@ (name "digitalocean-api-token") (label ("API Token")) (value ,(alist-ref 'digitalocean-api-token config)))))
+         (Field (@ (name "digitalocean-api-token") (label ("API Token")) (type "password")
+                   (value ,(alist-ref 'digitalocean-api-token config)))))
         (Fieldset
          (@ (title "Backblaze"))
-         (Field (@ (name "backblaze-application-key") (label ("Application Key")) (value ,(alist-ref 'backblaze-application-key config))))
-         (Field (@ (name "backblaze-key-id") (label ("Key ID")) (value ,(alist-ref 'backblaze-key-id config))))
-         (Field (@ (name "backblaze-bucket-url") (label ("Bucket URL")) (value ,(alist-ref 'backblaze-bucket-url config)))))
+         (Field (@ (name "backblaze-application-key") (label ("Application Key"))
+                   (type "password")
+                   (value ,(alist-ref 'backblaze-application-key config))))
+         (Field (@ (name "backblaze-key-id") (label ("Key ID")) (type "password")
+                   (value ,(alist-ref 'backblaze-key-id config))))
+         (Field (@ (name "backblaze-bucket-url") (label ("Bucket URL")) (type "password")
+                   (value ,(alist-ref 'backblaze-bucket-url config)))))
         (Form-Nav)))))))
 
 (post "/config/wizard/services-submit/:id"