Encryption

Encryption configuration for sensitive data. May be used to encrypt data at rest, e.g. feature properties or resources. The symmetric key must be 32 (AES-256).

Options

NameDefaultDescriptionTypeSince
keyFile
null
A file with the symmetric key for encryption. The key must be 32 bytes long (AES-256).
string
v4.9
key
null
Instead of a key file, the key might also be provided inline, encoded as Base64. The decoded key must be 32 bytes long (AES-256). It is recommended to reference an environment variable, e.g. ${ENCRYPTION_KEY}, instead of storing the key in the configuration.
string
v4.9