# /etc/custodia/custodia.conf

[global]

debug = true

makedirs = true

[store:sqlite]

handler = SqliteStore

dburi = ${libdir}/secrets.db

table = secrets

[store:encrypted_sqlite]

handler = EncryptedOverlay

backing_store = sqlite

master_key = ${libdir}/secrets.key

master_enctype = A128CBC-HS256

autogen_master_key = true

[auth:creds]

handler = SimpleCredsAuth

uid = root

gid = root

[authz:paths]

handler = SimplePathAuthz

paths = /. /secrets

[/]

handler = Root

[/secrets]

handler = Secrets

store = encrypted_sqlite