File tree Expand file tree Collapse file tree 1 file changed +7
-7
lines changed Expand file tree Collapse file tree 1 file changed +7
-7
lines changed Original file line number Diff line number Diff line change @@ -237,18 +237,18 @@ manually store this file somewhere and deploy it. There are 2 ways to do that:
237
237
238
238
1) Uploading the file:
239
239
240
- The first option is to copy the **decryption key ** -
241
- ``/ config/secrets/prod/prod.decrypt.private.php `` to your server(s).
240
+ The first option is to copy the **production decryption key ** -
241
+ ``config/secrets/prod/prod.decrypt.private.php `` to your server(s).
242
242
243
243
2) Using an Environment Variable
244
244
245
245
The second way is to set the ``SYMFONY_DECRYPTION_SECRET `` environment variable
246
- to the base64 encoded value of the **decryption key **. A fancy way to fetch the
247
- value of the key is:
246
+ to the base64 encoded value of the **production decryption key **.
247
+ A fancy way to define it is:
248
248
249
249
.. code-block :: terminal
250
250
251
- $ php -r 'echo base64_encode(require "config/secrets/prod/prod.decrypt.private.php");'
251
+ $ export SYMFONY_DECRYPTION_SECRET=` php -r 'echo base64_encode(require "config/secrets/prod/prod.decrypt.private.php");'`
252
252
253
253
To improve performance (i.e. avoid decrypting secrets at runtime), you can decrypt
254
254
your secrets during deployment to the "local" vault:
@@ -257,8 +257,8 @@ your secrets during deployment to the "local" vault:
257
257
258
258
$ php bin/console secrets:decrypt-to-local --force --env=prod
259
259
260
- This will put all the decrypted secrets into ``.env.prod.local ``. After doing this,
261
- the decryption key does *not * need to remain on the server.
260
+ This will write all the decrypted secrets into the ``.env.prod.local `` file.
261
+ After doing this, the decryption key does *not * need to remain on the server.
262
262
263
263
Rotating Secrets
264
264
----------------
You can’t perform that action at this time.
0 commit comments