path: root/cluster/prod/app/plume/secrets.toml

[service_user."plume"]
password_secret = "plume/pgsql_pw"

[secrets."plume/secret_key"]
type = 'command'
rotate = true
command = 'openssl rand -base64 32'

[secrets."plume/s3_access_key"]
type = 'user'
description = 'S3 access key ID for database and media storage'

[secrets."plume/s3_secret_key"]
type = 'user'
description = 'S3 secret key for database and media storage'