ee26c3
# /etc/custodia/custodia.conf
ee26c3
[global]
ee26c3
debug = true
ee26c3
makedirs = true
ee26c3
ee26c3
[store:sqlite]
ee26c3
handler = SqliteStore
ee26c3
dburi = ${libdir}/secrets.db
ee26c3
table = secrets
ee26c3
ee26c3
[store:encrypted_sqlite]
ee26c3
handler = EncryptedOverlay
ee26c3
backing_store = sqlite
ee26c3
master_key = ${libdir}/secrets.key
ee26c3
master_enctype = A128CBC-HS256
ee26c3
autogen_master_key = true
ee26c3
ee26c3
[auth:creds]
ee26c3
handler = SimpleCredsAuth
ee26c3
uid = root
ee26c3
gid = root
ee26c3
ee26c3
[authz:paths]
ee26c3
handler = SimplePathAuthz
ee26c3
paths = /. /secrets
ee26c3
ee26c3
[/]
ee26c3
handler = Root
ee26c3
ee26c3
[/secrets]
ee26c3
handler = Secrets
ee26c3
store = encrypted_sqlite