problem with my komo.do setup - is it secured?

gbzret4d

Im using https://komo.do/

This is my periphery.config.toml
port = 8120
bind_ip = "[::]"
root_directory = "/etc/komodo"

disable_terminals = false
stats_polling_rate = "5-sec"
legacy_compose_cli = false
include_disk_mounts = []
exclude_disk_mounts = []

allowed_ips = []
passkeys = ["XXXXXXXXXXXXXXXXXXXXXXXXXX"]

ssl_enabled = false
# ssl_key_file = "/etc/komodo/ssl/key.pem"
# ssl_cert_file = "/etc/komodo/ssl/cert.pem"

logging.level = "info"
logging.stdio = "standard"
logging.pretty = false
logging.otlp_endpoint = ""
logging.opentelemetry_service_name = "Komodo"

In my komodo toml on my main server im using the same passkey.

When im adding now a server in the webui it connects to the periphery server without a problem but im not sure if its really using the passkey to authenticate on my periphery server. This is the output when im trying to run following command on the periphery server:
curl -v -H "Authorization: Bearer XXXXXXXXXXXXXXXXXXXXXXXXXX" http://localhost:8120/healthz
Host localhost:8120 was resolved.
IPv6: ::1
IPv4: 127.0.0.1
Trying [::1]:8120...
Connected to localhost (::1) port 8120
GET /healthz HTTP/1.1
Host: localhost:8120
User-Agent: curl/8.5.0
Accept: /
Authorization: Bearer XXXXXXXXXXXXXXXXXXXXXXXXXX
HTTP/1.1 401 Unauthorized
content-type: application/json
content-length: 46
date: Tue, 29 Apr 2025 20:42:51 GMT
Connection #0 to host localhost left intact
{"error":"request passkey invalid","trace":[]}

This is the ouput of the periphery service:
sudo journalctl -u periphery -f
Apr 29 21:36:01 localhost sh[245688]: 2025-04-29T19:36:01.262554Z INFO periphery: Komodo Periphery starting on http://[::]:8120
Apr 29 21:39:46 localhost sh[245688]: 2025-04-29T19:39:46.906055Z INFO periphery: Exiting all active Terminals for shutdown
Apr 29 21:39:46 localhost systemd[1]: Stopping periphery.service - Agent to connect with Komodo Core...
Apr 29 21:39:47 localhost systemd[1]: periphery.service: Deactivated successfully.
Apr 29 21:39:47 localhost systemd[1]: Stopped periphery.service - Agent to connect with Komodo Core.
Apr 29 21:39:47 localhost systemd[1]: Started periphery.service - Agent to connect with Komodo Core.
Apr 29 21:39:47 localhost sh[245925]: 2025-04-29T19:39:47.028188Z INFO periphery: Komodo Periphery version: v1.17.4
Apr 29 21:39:47 localhost sh[245925]: 2025-04-29T19:39:47.028454Z INFO periphery: PeripheryConfig { port: 8120, bind_ip: "[::]", root_directory: "/etc/komodo", repo_dir: None, stack_dir: None, build_dir: None, disable_terminals: false, stats_polling_rate: FiveSeconds, legacy_compose_cli: false, logging: LogConfig { level: Info, stdio: Standard, pretty: false, otlp_endpoint: "", opentelemetry_service_name: "Komodo" }, allowed_ips: [], passkeys: ["##############"], include_disk_mounts: [], exclude_disk_mounts: [], secrets: {}, git_providers: [], docker_registries: [], ssl_enabled: false, ssl_key_file: None, ssl_cert_file: None }
Apr 29 21:39:47 localhost sh[245925]: 2025-04-29T19:39:47.028513Z INFO periphery: 🔓 Periphery SSL Disabled
Apr 29 21:39:47 localhost sh[245925]: 2025-04-29T19:39:47.028518Z INFO periphery: Komodo Periphery starting on http://[::]:8120

How can i test if the passkey is really used and working?