diff options
| author | Alex <alex@adnab.me> | 2024-01-15 15:20:16 +0000 |
|---|---|---|
| committer | Alex <alex@adnab.me> | 2024-01-15 15:20:16 +0000 |
| commit | ee7fe27d3d3cc473dcf9a4045b10a957382d4a7b (patch) | |
| tree | 8b87676d871e30a3bfa6a1082d0cbcdda15e2de1 /doc | |
| parent | 4b3dee2ca3be35d2df73626ad36a8cddedc41e6f (diff) | |
| parent | f83fa021937978e79c917c08b3499ba866120284 (diff) | |
| download | garage-ee7fe27d3d3cc473dcf9a4045b10a957382d4a7b.tar.gz garage-ee7fe27d3d3cc473dcf9a4045b10a957382d4a7b.zip | |
Merge pull request 'Add allow_world_readable_secrets option to config file' (#663) from PicNoir/garage:nin/world-readable-conf-file into main-0.8.x
Reviewed-on: https://git.deuxfleurs.fr/Deuxfleurs/garage/pulls/663
Diffstat (limited to 'doc')
| -rw-r--r-- | doc/book/reference-manual/configuration.md | 12 |
1 files changed, 12 insertions, 0 deletions
diff --git a/doc/book/reference-manual/configuration.md b/doc/book/reference-manual/configuration.md index 2a8c5df5..a536dd02 100644 --- a/doc/book/reference-manual/configuration.md +++ b/doc/book/reference-manual/configuration.md @@ -323,6 +323,18 @@ be obtained by running `garage node id` and then included directly in the key will be returned by `garage node id` and you will have to add the IP yourself. +### `allow_world_readable_secrets` + +Garage checks the permissions of your secret files to make sure +they're not world-readable. In some cases, the check might fail and +consider your files as world-readable even if they're not. Such as +when using Posix ACLs. + +Setting `allow_world_readable_secrets` to `true` bypass this +permission verification. + +Alternatively, you can set the `GARAGE_ALLOW_WORLD_READABLE_SECRETS` +environment variable to `true` to bypass the permissions check. ## The `[consul_discovery]` section |