Secrets
Top-level secrets block defines app-wide generated values shared across components via $secrets.<name>.
| Field | Type | Required | Description |
|---|---|---|---|
generator |
enum |
yes | Generation strategy (see below) |
description |
string |
no | Human description |
Generator strategies:
| Generator | Produces | Example |
|---|---|---|
secret |
Cryptographically random string (suitable for signing keys, tokens) | a3f8b2c1d9e7... |
uuid |
UUID v4 | 550e8400-e29b-41d4-a716-446655440000 |
port |
Allocates an available port on the host | 8432 |
secrets:
secret-key-base:
generator: secret
jwt-secret:
generator: uuid
description: "JWT signing key"
components:
api:
env:
SECRET_KEY_BASE: "$secrets.secret-key-base"
worker:
env:
SECRET_KEY_BASE: "$secrets.secret-key-base"Both components receive the same generated value.