Expand description
Config values that name a secret instead of holding it, so the config file holds no secret.
passbox:<name> is read once through passbox, ${NAME} reads an environment variable, any
other value is used as written. A reference is the whole value, never part of a longer one
Functions§
- config_
secret - A config value resolved with
resolve, read once per daemon start: a passbox read waits on Touch ID, so a secret read in two places must not prompt twice - resolve
- Blocking, it waits on passbox’s Touch ID prompt, so call it from
spawn_blocking