mix fact.recover (Fact v0.4.1)

View Source

Recovers an encrypted database using the recovery key.

This task performs a full key rotation: it decrypts all record files with the old Data Encryption Key (DEK), generates a new DEK along with new primary and recovery keys, re-encrypts every record, and updates the .bootstrap file.

The database must not be running during recovery.

Usage

mix fact.recover --path data/my_db --recovery-key <base64_key>

Options

  • --path / -p — (required) Path to the database directory.
  • --recovery-key — (required) Base64-encoded recovery key.