Blame SOURCES/custodia.conf

79af3c
# /etc/custodia/custodia.conf
79af3c
79af3c
[DEFAULT]
79af3c
libdir = /var/lib/custodia
79af3c
logdir = /var/log/custodia
79af3c
rundir = /var/run/custodia
79af3c
79af3c
[global]
79af3c
debug = true
79af3c
server_socket = ${rundir}/custodia.sock
79af3c
auditlog = ${logdir}/audit.log
79af3c
79af3c
[store:sqlite]
79af3c
handler = SqliteStore
79af3c
dburi = ${libdir}/secrets.db
79af3c
table = secrets
79af3c
79af3c
[store:encrypted_sqlite]
79af3c
handler = EncryptedOverlay
79af3c
backing_store = sqlite
79af3c
master_key = ${libdir}/secrets.key
79af3c
master_enctype = A128CBC-HS256
79af3c
autogen_master_key = true
79af3c
79af3c
[auth:creds]
79af3c
handler = SimpleCredsAuth
79af3c
uid = root
79af3c
gid = root
79af3c
79af3c
[authz:paths]
79af3c
handler = SimplePathAuthz
79af3c
paths = /. /secrets
79af3c
79af3c
[/]
79af3c
handler = Root
79af3c
79af3c
[/secrets]
79af3c
handler = Secrets
79af3c
store = encrypted_sqlite