Skip to content

Commit 231a862

Browse files
committed
minor #13655 Update secrets.rst (94noni)
This PR was merged into the 4.4 branch. Discussion ---------- Update secrets.rst Hi, here are small changes propositions to improve the doc while trying this feature Commits ------- 642b631 Update secrets.rst
2 parents 44dc8da + 642b631 commit 231a862

File tree

1 file changed

+7
-7
lines changed

1 file changed

+7
-7
lines changed

configuration/secrets.rst

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -237,18 +237,18 @@ manually store this file somewhere and deploy it. There are 2 ways to do that:
237237

238238
1) Uploading the file:
239239

240-
The first option is to copy the **decryption key** -
241-
``/config/secrets/prod/prod.decrypt.private.php`` to your server(s).
240+
The first option is to copy the **production decryption key** -
241+
``config/secrets/prod/prod.decrypt.private.php`` to your server(s).
242242

243243
2) Using an Environment Variable
244244

245245
The second way is to set the ``SYMFONY_DECRYPTION_SECRET`` environment variable
246-
to the base64 encoded value of the **decryption key**. A fancy way to fetch the
247-
value of the key is:
246+
to the base64 encoded value of the **production decryption key**.
247+
A fancy way to define it is:
248248

249249
.. code-block:: terminal
250250
251-
$ php -r 'echo base64_encode(require "config/secrets/prod/prod.decrypt.private.php");'
251+
$ export SYMFONY_DECRYPTION_SECRET=`php -r 'echo base64_encode(require "config/secrets/prod/prod.decrypt.private.php");'`
252252
253253
To improve performance (i.e. avoid decrypting secrets at runtime), you can decrypt
254254
your secrets during deployment to the "local" vault:
@@ -257,8 +257,8 @@ your secrets during deployment to the "local" vault:
257257
258258
$ php bin/console secrets:decrypt-to-local --force --env=prod
259259
260-
This will put all the decrypted secrets into ``.env.prod.local``. After doing this,
261-
the decryption key does *not* need to remain on the server.
260+
This will write all the decrypted secrets into the ``.env.prod.local`` file.
261+
After doing this, the decryption key does *not* need to remain on the server.
262262

263263
Rotating Secrets
264264
----------------

0 commit comments

Comments
 (0)