identity-vault/config/initializers/active_record_encryption.rb
2026-01-20 23:10:23 -05:00

10 lines
547 B
Ruby

# frozen_string_literal: true
# Configure Active Record Encryption to use environment variables
# instead of Rails credentials
if ENV["ACTIVE_RECORD_ENCRYPTION_PRIMARY_KEY"].present?
Rails.application.config.active_record.encryption.primary_key = ENV["ACTIVE_RECORD_ENCRYPTION_PRIMARY_KEY"]
Rails.application.config.active_record.encryption.deterministic_key = ENV["ACTIVE_RECORD_ENCRYPTION_DETERMINISTIC_KEY"]
Rails.application.config.active_record.encryption.key_derivation_salt = ENV["ACTIVE_RECORD_ENCRYPTION_KEY_DERIVATION_SALT"]
end