sklpdocs

sklp config rotate

sklp config rotate [flags]

Description

Reads the file with SKLP_SECRETS_PASSPHRASE and rewrites it under SKLP_SECRETS_PASSPHRASE_NEW, drawing a fresh salt. No value is ever printed or passed on the command line. Also upgrades a file written at the old KDF cost to the current one.

Flags

FlagAliasesTypeDefaultEnvDescription
--stack-sstringprod—stack whose .sklp/<stack>/config.yaml to operate on

Technical details

Technical details

Raw command JSON

{
  "path": [
    "sklp",
    "config",
    "rotate"
  ],
  "slug": "config-rotate",
  "name": "rotate",
  "short": "Re-seal every secret under a new passphrase (new salt, current KDF cost)",
  "long": "Reads the file with SKLP_SECRETS_PASSPHRASE and rewrites it under\nSKLP_SECRETS_PASSPHRASE_NEW, drawing a fresh salt. No value is ever printed\nor passed on the command line. Also upgrades a file written at the old KDF\ncost to the current one.",
  "synopsis": "sklp config rotate [flags]",
  "flags": [
    {
      "name": "stack",
      "aliases": [
        "s"
      ],
      "usage": "stack whose .sklp/<stack>/config.yaml to operate on",
      "type": "string",
      "default": "prod"
    }
  ]
}

See also