Skip to content

Generate secret keys

Vincent Pochet edited this page Jun 23, 2022 · 1 revision

Active record encryption

Active record encryption is used to store secret data at organization level.

To generate the require keys, just run:

> lago exec api rails db:encryption:init  
Add this entry to the credentials of the target environment: 

active_record_encryption:
  primary_key: 2OGWjul2G2Jm2a1ltTlVnGd0yld2yCvR
  deterministic_key: ZkVCmoDqEtqxors3IutDwgk5Mc5yJRhv
  key_derivation_salt: cJVHKTmljQ5JfF2QnZ65mJAkpii0rtWi

and initialize the env variable ENCRYPTION_PRIMARY_KEY, ENCRYPTION_DETERMINISTIC_KEY and ENCRYPTION_KEY_DERIVATION_SALT with the values

Clone this wiki locally