Svelixir.Config.Security (svelixir v0.11.0)

Encryption and secret sourcing — the security: section. Type-independent: it applies to :otp and :web alike.

openbao says the KEK is sourced from OpenBao, not that OpenBao is deployed — deployment is container.sidecars.openbao, which Svelixir.Config.Otp derives from this flag.

Connection settings (address, token) deliberately do not live here: they load from the generated project's own config/runtime.exs, keyed by project.app.

Summary

Types

t()

Functions

new!(input \\ [])

Builds this section, and any nested block, from input.

valid?(self)

Types

t()

@type t() :: %Svelixir.Config.Security{
  cloak: boolean(),
  envelope_encryption: boolean(),
  openbao: boolean()
}

Functions

new!(input \\ [])

@spec new!(keyword() | map()) :: t()

Builds this section, and any nested block, from input.