06c7d6
# /etc/custodia/custodia.conf
06c7d6
[global]
06c7d6
debug = true
06c7d6
makedirs = true
06c7d6
06c7d6
[store:sqlite]
06c7d6
handler = SqliteStore
06c7d6
dburi = ${libdir}/secrets.db
06c7d6
table = secrets
06c7d6
06c7d6
[store:encrypted_sqlite]
06c7d6
handler = EncryptedOverlay
06c7d6
backing_store = sqlite
06c7d6
master_key = ${libdir}/secrets.key
06c7d6
master_enctype = A128CBC-HS256
06c7d6
autogen_master_key = true
06c7d6
06c7d6
[auth:creds]
06c7d6
handler = SimpleCredsAuth
06c7d6
uid = root
06c7d6
gid = root
06c7d6
06c7d6
[authz:paths]
06c7d6
handler = SimplePathAuthz
06c7d6
paths = /. /secrets
06c7d6
06c7d6
[/]
06c7d6
handler = Root
06c7d6
06c7d6
[/secrets]
06c7d6
handler = Secrets
06c7d6
store = encrypted_sqlite