Added comments about seccureKeys for configuration files encryption

svn path=/nixos/trunk/; revision=12342
This commit is contained in:
Michael Raskin 2008-07-11 08:01:09 +00:00
parent 48ec05d257
commit 0ac32cbb99

View File

@ -2467,7 +2467,13 @@
default = /var/elliptic-keys/public;
description = "
Public key. Make it path argument, so it is copied into store and
hashed.
hashed.
The key is used to encrypt Gateway 6 configuration in store, as it
contains a password for external service. Unfortunately,
derivation file should be protected by other means. For example,
nix-http-export.cgi will happily export any non-derivation path,
but not a derivation.
";
};
private = mkOption {