Skip to content

Commit c9cda56

Browse files
MB-61292: Enable config encryption by default
Before native-encryption we did encrypt sensive data in config with master password by default. This patch enables native encryption with master password for configuration by default. Change-Id: I4d843871eabfc606dfd4b8cca3bbda234f22834b Reviewed-on: https://review.couchbase.org/c/ns_server/+/217923 Reviewed-by: Navdeep S Boparai <[email protected]> Well-Formed: Build Bot <[email protected]> Tested-by: Build Bot <[email protected]> Tested-by: Timofey Barmin <[email protected]>
1 parent d7b3c08 commit c9cda56

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

apps/ns_server/src/menelaus_web_encr_at_rest.erl

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -111,7 +111,7 @@ get_settings(Snapshot, ExtraSettings) ->
111111
Merge(Merge(defaults(), Settings), ExtraSettings).
112112

113113
defaults() ->
114-
#{config_encryption => #{encryption => disabled,
114+
#{config_encryption => #{encryption => encryption_service,
115115
secret_id => ?SECRET_ID_NOT_SET,
116116
dek_lifetime_in_sec => 365*60*60*24,
117117
dek_rotation_interval_in_sec => 30*60*60*24},

0 commit comments

Comments
 (0)