Simple Secure Storage
Simple Secure Storage provides a straightforward way to manage sensitive information locally without relying on external services.
Configuring Simple Secure Storage
Simple Secure Storage uses a local file-based approach to securely store sensitive information, such as database credentials. This method is straightforward to set up and manage, making it suitable for testing and development purposes.
| Not Recommended for Production |
|---|
| The Simple vault type is not recommended for use in production environments because it prioritizes ease of setup over strong security measures. |
Key Vault File
The Key Vault file contains information about databases in the environment, such as usernames, passwords, or URLs.
| Good to know |
|---|
| All database settings can be stored in the Key Vault file. |
On startup, the given values in this secrets file are encrypted, at which point these values should no longer be
manually modified. Should the secrets file be manually updated, then please create a new Key Vault file. The secrets
file is analyzed for an (invisible) null character followed by a binary marker:
at the end of the file to verify that it is
encrypted.
Important to note:
- Keys and values are separated by a
:=sign. - Comment lines must start with
#or//.
Examples
The following is an unencrypted sample of a Key Vault file:
# System database
systemDatabaseUser:=amtjava
systemDatabasePassword:=amtjava
systemDatabaseURL:=jdbc:postgresql://localhost/amtjava
# Application database custmanibm
custmanibmUser:=amtjava
custmanibmPassword:=amtjava
custmanibmURL:=jdbc:postgresql://localhost/custmanibmThe following is a sample of an encrypted Key Vault file:
# System database
gksystemDatabaseUser:=XXZW/zw1fn274rWjAGHHJg==
gksystemDatabasePassword:=XXZW/zw1fn274rWjAGHHJg==
gksystemDatabaseURL:=lPu0xEsVxm2iUUUnaaQDj5U/Jw26FDAMQ0Zl8IoSeloA88+7EjK7nkxpUccHU8SQ
# Application database custmanibm
gkcustmanibmUser:=aNplS0c7Vx5A3wX1VTuTdA==
gkcustmanibmPassword:=aNplS0c7Vx5A3wX1VTuTdA==
gkcustmanibmURL:=N4xGiYRQyy0pNv0SZFJKKg==
閂