PkiEncrypterOptions

@webda/core

---

Interface: PkiEncrypterOptions

Defined in: packages/core/src/services/pki.encrypter.ts:19

Options of the pki encrypter, in parameters.configurationEncryption.encrypters.pki

Properties

activeKey?

optional activeKey?: string

Defined in: packages/core/src/services/pki.encrypter.ts:25

Key id used to encrypt new values

Its public key must be available: <publicKeys>/<activeKey>.pub.pem

---

privateKeys?

optional privateKeys?: string

Defined in: packages/core/src/services/pki.encrypter.ts:39

Directory of the private keys at runtime, a Kubernetes Secret mount for example: <kid>.pem or <kid>

Default

env WEBDA_PKI_PRIVATE_KEYS_DIR, then "/etc/webda/pki"

---

publicKeys?

optional publicKeys?: string

Defined in: packages/core/src/services/pki.encrypter.ts:33

Directory of the public keys, relative to the application: <kid>.pub.pem

Commit it with the application, any developer or CI job can then encrypt a value.

Default

".webda/keys"