Improve symmetric key gen #1

New Issue

2025-10-29T17:49:50Z

Brooke commented

2025-10-29 17:49:50 +00:00

Currently the "gen_key" function has to be manually called to generate a key and then inserted into the crypto_key secret, finally the service must be undeployed and redployed. This is non-ideal but I'm not sure how else to handle it automatically as liberaforms is very specific about this key and this was the reason for uploads failing.
Commit adding key_gen command:
09e2b37332

Reference in liberaforms codebase to this command, seems it's a Fernet key:
https://codeberg.org/LiberaForms/server/src/branch/main/liberaforms/commands/cryptokey.py

Currently the "gen_key" function has to be manually called to generate a key and then inserted into the crypto_key secret, finally the service must be undeployed and redployed. This is non-ideal but I'm not sure how else to handle it automatically as liberaforms is very specific about this key and this was the reason for uploads failing. Commit adding key_gen command: 09e2b37332 Reference in liberaforms codebase to this command, seems it's a Fernet key: https://codeberg.org/LiberaForms/server/src/branch/main/liberaforms/commands/cryptokey.py

marlon commented

2025-10-29 18:02:28 +00:00

Does this key need to be managed by docker secrets? Or could it just be generated by the entrypoint and saved in a volume inside the container?

Brooke commented

2025-10-29 18:25:03 +00:00

I think you're right that it would be possible to do it in the entrypoint but I'm not totally sure how to handle that. Liberaforms expects it in an environment variable CRYPTO_KEY

marlon commented

2025-10-29 19:06:34 +00:00

Here's a proposed way. I haven't tested but hopefully it gives an idea: https://git.coopcloud.tech/coop-cloud/liberaforms/src/branch/cryptosecret

Brooke commented

2026-01-15 20:59:54 +00:00

I realize this is pretty old but if it has been tested then I'd say go ahead and author a PR. I still have my reservations about not using docker secrets but I don't really have a reasonable alternative.

Brooke referenced this issue from a commit

2026-01-23 16:02:25 +00:00

Merge pull request 'cryptosecret' (#2) from cryptosecret into main

Brooke closed this issue

2026-01-23 16:04:44 +00:00

Sign in to join this conversation.

2 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: coop-cloud/liberaforms#1