litestream icon indicating copy to clipboard operation
litestream copied to clipboard

Support reading age identity from file

Open aabccd021 opened this issue 11 months ago • 0 comments

It's a common security practice to read secrets from file instead of specifying it directly on configuration file / environment variable (e.g. GOOGLE_APPLICATION_CREDENTIALS=/run/secrets/gcs_backup_service_secret).

This PR enables litestream to read age identity from file path via identity-files attribute.

dbs:
  - path: /var/lib/db
    replicas:
      - url: s3://mybkt.litestream.io/db
        age:
          identity-files:
            - /path/to/age-secret-key
          recipients:
            - age1xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

aabccd021 avatar Jan 06 '25 05:01 aabccd021