gen

coder · kylecarbs · May 30, 2023 · Jun 11, 2023 · Jun 12, 2023 · Jun 12, 2023
commit faa20ad5426b787c11fdb8f12241d3247f7f79d7
diff --git a/coderd/apidoc/docs.go b/coderd/apidoc/docs.go
diff --git a/coderd/apidoc/swagger.json b/coderd/apidoc/swagger.json
diff --git a/docs/api/general.md b/docs/api/general.md
@@ -196,6 +196,7 @@ curl -X GET http://coder-server:8080/api/v2/deployment/config \
     "disable_path_apps": true,
     "disable_session_expiry_refresh": true,
     "experiments": ["string"],
+    "external_token_encryption_key": "string",
     "git_auth": {
       "value": [
         {

diff --git a/docs/api/schemas.md b/docs/api/schemas.md
@@ -1894,6 +1894,7 @@ CreateParameterRequest is a structure used to create a new parameter value for a
     "disable_path_apps": true,
     "disable_session_expiry_refresh": true,
     "experiments": ["string"],
+    "external_token_encryption_key": "string",
     "git_auth": {
       "value": [
         {
@@ -2239,6 +2240,7 @@ CreateParameterRequest is a structure used to create a new parameter value for a
   "disable_path_apps": true,
   "disable_session_expiry_refresh": true,
   "experiments": ["string"],
+  "external_token_encryption_key": "string",
   "git_auth": {
     "value": [
       {
@@ -2429,6 +2431,7 @@ CreateParameterRequest is a structure used to create a new parameter value for a
 | `disable_path_apps`                  | boolean                                                                                    | false    |              |                                                                    |
 | `disable_session_expiry_refresh`     | boolean                                                                                    | false    |              |                                                                    |
 | `experiments`                        | array of string                                                                            | false    |              |                                                                    |
+| `external_token_encryption_key`      | string                                                                                     | false    |              |                                                                    |
 | `git_auth`                           | [clibase.Struct-array_codersdk_GitAuthConfig](#clibasestruct-array_codersdk_gitauthconfig) | false    |              |                                                                    |
 | `http_address`                       | string                                                                                     | false    |              | Http address is a string because it may be set to zero to disable. |
 | `in_memory_database`                 | boolean                                                                                    | false    |              |                                                                    |

diff --git a/docs/cli/server.md b/docs/cli/server.md
@@ -233,6 +233,15 @@ Expose the swagger endpoint via /swagger.
 
 Enable one or more experiments. These are not ready for production. Separate multiple experiments with commas, or enter '\*' to opt-in to all available experiments.
 
+### --external-token-encryption-key
+
+|             |                                                   |
+| ----------- | ------------------------------------------------- |
+| Type        | <code>string</code>                               |
+| Environment | <code>$CODER_EXTERNAL_TOKEN_ENCRYPTION_KEY</code> |
+
+Encrypt OIDC and Git authentication tokens with AES-256-GCM in the database. The value must be a base64-encoded key.
+
 ### --provisioner-force-cancel-interval
 
 |             |                                                       |