mix lemon.secrets.init (lemon_core v0.1.0)

View Source

Initializes the encrypted secrets master key.

This command stores a generated key with the first writable key provider: the macOS Keychain where it is available, otherwise the key file (~/.lemon/secrets_master_key by default, 0600).

mix lemon.secrets.init

Options:

  • --target file — force a specific provider (keychain or file)
  • --force — overwrite an existing key file. Every secret encrypted under the previous key becomes unreadable, so export them first.