services.warpgate.databaseEncryptionKeysFile

NixOS option

Path to file containing encryption key(s) to encrypt target credentials stored in database. Should be a env-like file: WARPGATE_ENCRYPTION_KEY=$(openssl rand -base64 32). If you are rotating key, move the old key to WARPGATE_ENCRYPTION_KEY_OLD. See Encrypting credentials at rest.

type: null or string
Default
null
declared in: nixos/modules/services/security/warpgate.nixView source on NixOS/nixpkgs →