Description
Is this a new feature request?
- I have searched the existing issues
Wanted change
Support updates to Duplicati 2.0.9.105+ with encrypted settings.
Reason for change
With next canary release from Duplicati, the settings database is default encrypted, and if no key is supplied, it will derive the key from the machine serial number. For Docker setups, the underlying machine may change, causing the settings database to be lost. See issue #5420 and issue #5496.
Proposed code change
The easiest change is simply to add the default environment variable to the Docker file:
ENV DUPLICATI__DISABLE_DB_ENCRYPTION=true
ENV DUPLICATI__REQUIRE_DB_ENCRYPTION_KEY=true
The first one disables encryption, so the user needs to explicitly enable it, the second one prevents starting if no key is supplied (preventing use of the machine serial number as the key).
If there is some kind of persistent storage available, an alternative is to set the correct key, with something like:
ENV SETTINGS_ENCRYPTION_KEY=<persisted-key>
ENV DUPLICATI__REQUIRE_DB_ENCRYPTION_KEY=true
Metadata
Metadata
Assignees
Labels
Type
Projects
Status