[SecretSettings]
Available since Exponential 6.0.15 (in development, not in a release yet).
Summary
The group [SecretSettings] of settings/secrets.ini.
File
settings/secrets.ini; override it in settings/override/secrets.ini.append.php, in a siteaccess or in an extension.
Settings
| Setting | Default | Description |
|---|---|---|
| KeyFile | var/secrets/exp_secret.key | The key file, used when the environment variable EXP_SECRET_KEY is not set: made on first use (32 random bytes, base64, mode 0600). Relative to the installation, or absolute. It must not be in a path the web server serves. A backup of the database alone cannot decrypt the secrets: keep the key file (or EXP_SECRET_KEY) with it. |
| Secrets[] | (empty array) | Secrets set in the settings, by name (in the site's own settings, never in a repository), asked after the store: Secrets[<name>]=<value> |
See also
Generated example: secrets.ini [SecretSettings]
Added to the reference for Exponential 6.0.15: the 4.x reference had no page for this group. The descriptions are the comment lines of settings/secrets.ini.
Contributors
- Graham Brookins Updated
Comments
Add a comment