🚧 Add CA and server cert management

2026-09-19 13:35:49 +02:00
parent 45de68f0b7
commit 111d6cc390
20 changed files with 1317 additions and 34 deletions
@@ -27,6 +27,10 @@ class Settings(BaseSettings):
    session_secret: str = ""
    session_ttl_seconds: int = 60 * 60 * 8

+    # Private-key encryption at rest (spec section 43) — AES-256-GCM
+    # master key. Never stored in PostgreSQL.
+    secret_encryption_key: str = ""
+
    # Mosquitto management channel
    mosquitto_host: str = "mosquitto"
    mosquitto_mgmt_port: int = 1883