mirror of
https://github.com/coder/coder.git
synced 2025-07-09 11:45:56 +00:00
See also: https://github.com/coder/coder/pull/9522 - Adds commands `server dbcrypt {rotate,decrypt,delete}` to re-encrypt, decrypt, or delete encrypted data, respectively. - Plumbs through dbcrypt in enterprise/coderd (including unit tests). - Adds documentation in admin/encryption.md. This enables dbcrypt by default, but the feature is soft-enforced on supplying external token encryption keys. Without specifying any keys, encryption/decryption is a no-op.
40 lines
1013 B
Markdown
Generated
40 lines
1013 B
Markdown
Generated
<!-- DO NOT EDIT | GENERATED CONTENT -->
|
|
|
|
# server dbcrypt decrypt
|
|
|
|
Decrypt a previously encrypted database.
|
|
|
|
## Usage
|
|
|
|
```console
|
|
coder server dbcrypt decrypt [flags]
|
|
```
|
|
|
|
## Options
|
|
|
|
### --keys
|
|
|
|
| | |
|
|
| ----------- | ---------------------------------------------------------- |
|
|
| Type | <code>string-array</code> |
|
|
| Environment | <code>$CODER_EXTERNAL_TOKEN_ENCRYPTION_DECRYPT_KEYS</code> |
|
|
|
|
Keys required to decrypt existing data. Must be a comma-separated list of base64-encoded keys.
|
|
|
|
### --postgres-url
|
|
|
|
| | |
|
|
| ----------- | ------------------------------------- |
|
|
| Type | <code>string</code> |
|
|
| Environment | <code>$CODER_PG_CONNECTION_URL</code> |
|
|
|
|
The connection URL for the Postgres database.
|
|
|
|
### -y, --yes
|
|
|
|
| | |
|
|
| ---- | ----------------- |
|
|
| Type | <code>bool</code> |
|
|
|
|
Bypass prompts.
|