pub fn crypt_from_config(config: &AppConfig, legacy: &[u8]) -> Result<Crypt>Expand description
The application’s crypt: app.key and app.previous_keys when set, else a
key derived from backend.secret or the key stored at the first boot (id
0), so a deployment that configured nothing keeps a stable key. A key that
does not parse aborts the boot; a production deployment without app.key
is warned to run lat key generate.