secrets.ini [SecretSettings] #

The block [SecretSettings] of settings/secrets.ini, with 2 setting(s).

Never edit settings/secrets.ini itself: an update replaces it. Put the settings you change in an override, which wins over the shipped file:

• settings/override/secrets.ini.append.php for every siteaccess,
• settings/siteaccess/<siteaccess>/secrets.ini.append.php for one siteaccess,
• extension/<extension>/settings/secrets.ini.append.php in an extension (read when the extension is active).

KeyFile #

The key file, used when the environment variable EXP_SECRET_KEY is not set: made on first use (32 random bytes,
base64, mode 0600). Relative to the installation, or absolute. It must not be in a path the web server serves.
A backup of the database alone cannot decrypt the secrets: keep the key file (or EXP_SECRET_KEY) with it.

Default: var/secrets/exp_secret.key.

<?php /* #?ini charset="utf-8"?
# settings/override/secrets.ini.append.php
[SecretSettings]
KeyFile=var/secrets/exp_secret.key
*/ ?>

Secrets #

Secrets set in the settings, by name (in the site's own settings, never in a repository), asked after the store:
Secrets[<name>]=<value>

Default: an empty list.

<?php /* #?ini charset="utf-8"?
# settings/override/secrets.ini.append.php
[SecretSettings]
# an empty "Secrets[]" first replaces the shipped list; without it the items are added
Secrets[]
*/ ?>

Related #

• All blocks of secrets.ini
• All INI files
• The settings page

Generated by ./console exp:help:examples from settings/secrets.ini. Do not edit this page: change the source and generate again (how). Free documentation: GFDL 1.3 or later.