File tree 2 files changed +25
-0
lines changed 2 files changed +25
-0
lines changed Original file line number Diff line number Diff line change @@ -10,6 +10,7 @@ Coder v0.0.0-devel — A tool for provisioning self-hosted development environme
10
10
[40m [0m[91;40m$ coder templates init[0m[40m [0m
11
11
12
12
[1mSubcommands[0m
13
+ dbcrypt-rotate Rotate database encryption keys
13
14
features List Enterprise features
14
15
groups Manage groups
15
16
licenses Add, delete, and list licenses
Original file line number Diff line number Diff line change
1
+ Usage: coder dbcrypt-rotate [flags] --postgres-url <postgres_url> --external-token-encryption-keys <new-key>,<old-key>
2
+
3
+ Rotate database encryption keys
4
+
5
+ [1mOptions[0m
6
+ --postgres-url string, $CODER_PG_CONNECTION_URL
7
+ URL of a PostgreSQL database. If empty, PostgreSQL binaries will be
8
+ downloaded from Maven (https://repo1.maven.org/maven2) and store all
9
+ data in the config root. Access the built-in database with "coder
10
+ server postgres-builtin-url".
11
+
12
+ [1mEnterprise Options[0m
13
+ These options are only available in the Enterprise Edition.
14
+
15
+ --external-token-encryption-keys string-array, $CODER_EXTERNAL_TOKEN_ENCRYPTION_KEYS
16
+ Encrypt OIDC and Git authentication tokens with AES-256-GCM in the
17
+ database. The value must be a comma-separated list of base64-encoded
18
+ keys. A maximum of two keys may be provided. Each key, when
19
+ base64-decoded, must be exactly 32 bytes in length. The first key will
20
+ be used to encrypt new values. Subsequent keys will be used as a
21
+ fallback when decrypting.
22
+
23
+ ---
24
+ Run `coder --help` for a list of global options.
You can’t perform that action at this time.
0 commit comments