Versions in this module Expand all Collapse all v0 v0.9.0 Nov 12, 2026 Changes in this version + const NonceSize + var ErrInvalidKey = errors.New("invalid key") + var LockExpiration = 2 * time.Minute + var LockPollInterval = 1 * time.Second + var LockRefreshInterval = 5 * time.Second + var LockTimeout = 15 * time.Second + type CleartextIO struct + func (CleartextIO) Open(stored []byte) ([]byte, bool, error) + func (CleartextIO) Seal(plain []byte) []byte + type IO interface + Open func(stored []byte) (plain []byte, underOldKey bool, err error) + Seal func(plain []byte) []byte + type S3 struct + AccessKey string + Bucket string + Client *s3sdk.Client + EncryptionKey string + EncryptionKeyFile []string + EncryptionKeySSM []string + Endpoint string + Host string + Insecure bool + Logger *zap.Logger + OldEncryptionKeys []string + Prefix string + Profile string + Region string + RoleARN string + SecretKey string + UsePathStyle bool + func (s3 *S3) CaddyModule() caddy.ModuleInfo + func (s3 *S3) CertMagicStorage() (certmagic.Storage, error) + func (s3 *S3) Delete(ctx context.Context, key string) error + func (s3 *S3) Exists(ctx context.Context, key string) bool + func (s3 *S3) GoString() string + func (s3 *S3) List(ctx context.Context, path string, recursive bool) ([]string, error) + func (s3 *S3) Load(ctx context.Context, key string) ([]byte, error) + func (s3 *S3) Lock(ctx context.Context, key string) error + func (s3 *S3) MarshalLogObject(enc zapcore.ObjectEncoder) error + func (s3 *S3) Provision(ctx caddy.Context) error + func (s3 *S3) Stat(ctx context.Context, key string) (certmagic.KeyInfo, error) + func (s3 *S3) Store(ctx context.Context, key string, value []byte) error + func (s3 *S3) String() string + func (s3 *S3) Unlock(ctx context.Context, key string) error + func (s3 *S3) UnmarshalCaddyfile(d *caddyfile.Dispenser) error + type SecretBoxIO struct + func NewSecretBoxIO(current [keySize]byte, old ...[keySize]byte) *SecretBoxIO + func (sb *SecretBoxIO) Open(stored []byte) ([]byte, bool, error) + func (sb *SecretBoxIO) Seal(plain []byte) []byte
Go to main page