---
credentials:
secret_key_base:
description: Main secret key used to verify the integrity of signed cookies and tokens
algorithm: sha256
validation: ^[a-f0-9]{64}$
otp_secret:
description: OTP secret used for two-factor authentication
algorithm: sha256
validation: ^[a-f0-9]{64}$
vapid_private_key:
description: Private VAPID key used for web push notifications
algorithm: vapid_private
validation: ^[-_a-zA-Z0-9]{30,}$
vapid_public_key:
description: Public VAPID key used for web push notifications
algorithm: vapid_public
validation: ^[-_a-zA-Z0-9]{30,}$
active_record_encryption_deterministic_key:
description: Deterministic encryption key for Active Record encryption
algorithm: sha256
validation: ^[a-f0-9]{64}$
active_record_encryption_key_derivation_salt:
description: Key derivation salt for Active Record encryption
algorithm: sha256
validation: ^[a-f0-9]{64}$
active_record_encryption_primary_key:
description: Primary encryption key for Active Record encrypted columns
algorithm: sha256
validation: ^[a-f0-9]{64}$
