60ad85
# /etc/custodia/custodia.conf
60ad85
[global]
60ad85
debug = true
60ad85
makedirs = true
60ad85
60ad85
[store:sqlite]
60ad85
handler = SqliteStore
60ad85
dburi = ${libdir}/secrets.db
60ad85
table = secrets
60ad85
60ad85
[store:encrypted_sqlite]
60ad85
handler = EncryptedOverlay
60ad85
backing_store = sqlite
60ad85
master_key = ${libdir}/secrets.key
60ad85
master_enctype = A128CBC-HS256
60ad85
autogen_master_key = true
60ad85
60ad85
[auth:creds]
60ad85
handler = SimpleCredsAuth
60ad85
uid = root
60ad85
gid = root
60ad85
60ad85
[authz:paths]
60ad85
handler = SimplePathAuthz
60ad85
paths = /. /secrets
60ad85
60ad85
[/]
60ad85
handler = Root
60ad85
60ad85
[/secrets]
60ad85
handler = Secrets
60ad85
store = encrypted_sqlite