Documentation
¶
Overview ¶
Package datasec provides at-rest encryption for secrets stored in SQLite. The key lives in dataDir/secrets.key (mode 0600) and is excluded from backups.
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func EncryptFile ¶
EncryptFile reads path and returns encrypted bytes (AES-GCM, random nonce prepended).
func Init ¶
Init loads or creates the per-install encryption key. Call once before opening the store.
func KeyFileName ¶
func KeyFileName() string
KeyFileName is the basename excluded from backup archives.
Types ¶
This section is empty.
Click to show internal directories.
Click to hide internal directories.