Module secrets 

This file includes everything for server configuration setup and hashing.

It includes functions for encrypting and decrypting the server configuration using AES-256-GCM, as well as functions for saving and loading the encrypted configuration from a file. It also provides a setup process that prompts the user for necessary configurations and generates secure defaults.

Constants

SECRETS_BACKUP_PATH

SECRETS_CHECKSUM_PATH

SECRETS_PATH

Functions

decrypt 🔒

Decrypts the given encrypted data using AES-256-GCM with a key derived from the provided passphrase.

derive_key 🔒

Derives a key from the given passphrase and salt using Argon2id.

encrypt 🔒

Encrypts the given data using AES-256-GCM with a key derived from the provided passphrase.

generate_random_bytes 🔒

load_encrypted_config

Loads and decrypts the configuration from the encrypted file using the provided passphrase.

map_dialoguer_error 🔒

Helper function that maps a dialoguer::Error to a String for easier error handling.

prompt_passphrase

Prompts the user for a passphrase to encrypt/decrypt the server configuration.

prompt_passphrase_new

run_setup

Runs setup process

save_encrypted_config

Saves the given configuration to an encrypted file using the provided passphrase.

secrets_exist

Checks if the encrypted secrets file exists.

validate_passphrase

verify_admin_credentials