From 47ec49f62f5af91d0d7d25bb4c4064e0b435e794 Mon Sep 17 00:00:00 2001 From: 24c02 <163450896+24c02@users.noreply.github.com> Date: Thu, 19 Mar 2026 17:28:37 -0400 Subject: [PATCH] why did this ever work --- config/initializers/lockbox.rb | 3 +++ 1 file changed, 3 insertions(+) diff --git a/config/initializers/lockbox.rb b/config/initializers/lockbox.rb index 94f7d3a..f51523f 100644 --- a/config/initializers/lockbox.rb +++ b/config/initializers/lockbox.rb @@ -6,6 +6,9 @@ elsif Rails.env.development? || Rails.env.test? # generate a deterministic key for dev/test so encrypted data persists across restarts # this is NOT secure for production – always set LOCKBOX_MASTER_KEY in prod Lockbox.master_key = Digest::SHA256.hexdigest("hca-dev-key") +elsif ENV["SECRET_KEY_BASE_DUMMY"].present? + # allow Rails to boot during asset precompilation without real secrets + Lockbox.master_key = "0" * 64 else raise "LOCKBOX_MASTER_KEY must be set in production" end