pub struct SecretSection {
pub enabled: bool,
pub providers: SecretProvidersSection,
}Expand description
Secret-handling settings (docs/proposals/secrets.lex).
Top-level kill switch + per-provider blocks. Disabling the
section globally ([secret] enabled = false) is equivalent to
disabling every provider; templates that call secret(...) then
surface a “no providers configured” render error.
This section is root-only. Unlike most config sections, the
[secret] block is always read from the root .dodot.toml;
per-pack overrides are ignored. Secret tooling
($PASSWORD_STORE_DIR, OP_SERVICE_ACCOUNT_TOKEN, the binaries
themselves) is a property of the user’s environment, not of any
individual pack — a pack-level override would invalidate the
once-per-run preflight contract (secrets.lex §5.4) and would
surface as confusing “secret X probed under config A but
resolved under config B” failures. Treat the root section as the
single source of truth.
Fields§
§enabled: boolMaster switch. Default true; flip to false to disable all secret resolution without removing the per-provider blocks.
providers: SecretProvidersSectionTrait Implementations§
Source§impl Clone for SecretSection
impl Clone for SecretSection
Source§fn clone(&self) -> SecretSection
fn clone(&self) -> SecretSection
1.0.0 · Source§fn clone_from(&mut self, source: &Self)
fn clone_from(&mut self, source: &Self)
source. Read moreSource§impl Config for SecretSection
impl Config for SecretSection
Source§type Layer = SecretSectionLayer
type Layer = SecretSectionLayer
Self (a potentially partial configuration). Read moreSource§fn from_layer(layer: Self::Layer) -> Result<Self, Error>
fn from_layer(layer: Self::Layer) -> Result<Self, Error>
Self from a layer and validates itself. Read moreSource§fn builder() -> Builder<Self>
fn builder() -> Builder<Self>
#[default = ...]) are merged
(with the lowest priority). Read more