File tree Expand file tree Collapse file tree 1 file changed +7
-7
lines changed Expand file tree Collapse file tree 1 file changed +7
-7
lines changed Original file line number Diff line number Diff line change @@ -237,18 +237,18 @@ manually store this file somewhere and deploy it. There are 2 ways to do that:
237237
2382381) Uploading the file:
239239
240- The first option is to copy the **decryption key ** -
241- ``/ config/secrets/prod/prod.decrypt.private.php `` to your server(s).
240+ The first option is to copy the **production decryption key ** -
241+ ``config/secrets/prod/prod.decrypt.private.php `` to your server(s).
242242
2432432) Using an Environment Variable
244244
245245The second way is to set the ``SYMFONY_DECRYPTION_SECRET `` environment variable
246- to the base64 encoded value of the **decryption key **. A fancy way to fetch the
247- value of the key is:
246+ to the base64 encoded value of the **production decryption key **.
247+ A fancy way to define it is:
248248
249249.. code-block :: terminal
250250
251- $ php -r 'echo base64_encode(require "config/secrets/prod/prod.decrypt.private.php");'
251+ $ export SYMFONY_DECRYPTION_SECRET=` php -r 'echo base64_encode(require "config/secrets/prod/prod.decrypt.private.php");'`
252252
253253 To improve performance (i.e. avoid decrypting secrets at runtime), you can decrypt
254254your secrets during deployment to the "local" vault:
@@ -257,8 +257,8 @@ your secrets during deployment to the "local" vault:
257257
258258 $ php bin/console secrets:decrypt-to-local --force --env=prod
259259
260- This will put all the decrypted secrets into ``.env.prod.local ``. After doing this,
261- the decryption key does *not * need to remain on the server.
260+ This will write all the decrypted secrets into the ``.env.prod.local `` file.
261+ After doing this, the decryption key does *not * need to remain on the server.
262262
263263Rotating Secrets
264264----------------
You can’t perform that action at this time.
0 commit comments