Added comments about seccureKeys for configuration files encryption

svn path=/nixos/trunk/; revision=12342
This commit is contained in:
Michael Raskin 2008-07-11 08:01:09 +00:00
parent 48ec05d257
commit 0ac32cbb99

View File

@ -2468,6 +2468,12 @@
description = " description = "
Public key. Make it path argument, so it is copied into store and Public key. Make it path argument, so it is copied into store and
hashed. hashed.
The key is used to encrypt Gateway 6 configuration in store, as it
contains a password for external service. Unfortunately,
derivation file should be protected by other means. For example,
nix-http-export.cgi will happily export any non-derivation path,
but not a derivation.
"; ";
}; };
private = mkOption { private = mkOption {