aboutsummaryrefslogtreecommitdiff
path: root/doc
diff options
context:
space:
mode:
authorAlex <alex@adnab.me>2024-01-15 15:20:16 +0000
committerAlex <alex@adnab.me>2024-01-15 15:20:16 +0000
commitee7fe27d3d3cc473dcf9a4045b10a957382d4a7b (patch)
tree8b87676d871e30a3bfa6a1082d0cbcdda15e2de1 /doc
parent4b3dee2ca3be35d2df73626ad36a8cddedc41e6f (diff)
parentf83fa021937978e79c917c08b3499ba866120284 (diff)
downloadgarage-ee7fe27d3d3cc473dcf9a4045b10a957382d4a7b.tar.gz
garage-ee7fe27d3d3cc473dcf9a4045b10a957382d4a7b.zip
Merge pull request 'Add allow_world_readable_secrets option to config file' (#663) from PicNoir/garage:nin/world-readable-conf-file into main-0.8.x
Reviewed-on: https://git.deuxfleurs.fr/Deuxfleurs/garage/pulls/663
Diffstat (limited to 'doc')
-rw-r--r--doc/book/reference-manual/configuration.md12
1 files changed, 12 insertions, 0 deletions
diff --git a/doc/book/reference-manual/configuration.md b/doc/book/reference-manual/configuration.md
index 2a8c5df5..a536dd02 100644
--- a/doc/book/reference-manual/configuration.md
+++ b/doc/book/reference-manual/configuration.md
@@ -323,6 +323,18 @@ be obtained by running `garage node id` and then included directly in the
key will be returned by `garage node id` and you will have to add the IP
yourself.
+### `allow_world_readable_secrets`
+
+Garage checks the permissions of your secret files to make sure
+they're not world-readable. In some cases, the check might fail and
+consider your files as world-readable even if they're not. Such as
+when using Posix ACLs.
+
+Setting `allow_world_readable_secrets` to `true` bypass this
+permission verification.
+
+Alternatively, you can set the `GARAGE_ALLOW_WORLD_READABLE_SECRETS`
+environment variable to `true` to bypass the permissions check.
## The `[consul_discovery]` section