letro/letro-authentication-service
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 1 Wiki Activity

Add secrets.encryption_file config option (#4617)

Browse Source
This commit is contained in:
Quentin Gliech
2025-06-05 15:14:55 +02:00
committed by GitHub
parent 65ec6c187c 4a8dfae7b9
commit 186b5cbdbe
8 changed files with 124 additions and 28 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
docs/reference/configuration.md
View File

@@ -232,6 +232,21 @@ secrets:
-----END EC PRIVATE KEY-----
```
### `secrets.encryption{_file}`
The encryption secret used for encrypting cookies and database fields. It takes
the form of a 32-bytes-long hex-encoded string. To provide the encryption secret
via file, set `secrets.encryption_file` to the file path; alternatively use
`secrets.encryption` for declaring the secret inline. The options
`secrets.encryption_file` and `secrets.encryption` are mutually exclusive.
If given via file, the encyption secret is only read at application startup.
The secret is not updated when the content of the file changes.
> ⚠️ **Warning** – Do not change the encryption secret after the initial start!
> Changing the encryption secret afterwards will lead to a loss of all encrypted
> information in the database.
### `secrets.keys`
The service can use a number of key types for signing.