refining/secrets
Public Access
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 61 Wiki Activity

feat(config): verify DB connection before saving set-db
Some checks failed
Secrets CLI - Build & Release / 版本 & Release (push) Successful in 2s
Details
Secrets CLI - Build & Release / Build (x86_64-unknown-linux-musl) (push) Has been cancelled
Details
Secrets CLI - Build & Release / Build (aarch64-apple-darwin) (push) Has been cancelled
Details
Secrets CLI - Build & Release / Build (x86_64-pc-windows-msvc) (push) Has been cancelled
Details
Secrets CLI - Build & Release / 发布草稿 Release (push) Has been cancelled
Details
Secrets CLI - Build & Release / 质量检查 (fmt / clippy / test) (push) Has been cancelled
Details

Browse Source 
- Check connection with create_pool before writing to config
- Show 'Database connection failed' on error, do not overwrite config
- Update AGENTS.md and README.md

Made-with: Cursor
This commit is contained in:
voson
2026-03-19 10:38:38 +08:00
parent a765dcc428
commit 3b36d5a3dd
3 changed files with 11 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
AGENTS.md
View File

@@ -115,6 +115,8 @@ secrets config show # 查看当前配置（密码脱敏）
secrets config path # 打印配置文件路径
```
`set-db` 会先验证连接可用，成功后才写入配置文件；连接失败时提示 "Database connection failed" 且不修改配置。
配置文件：`~/.config/secrets/config.toml`，权限 0600。`--db-url` 参数可一次性覆盖。
## 主密钥与加密
@@ -406,7 +408,7 @@ secrets run -n refining --kind service --name gitea -- printenv
### config — 配置管理（无需主密钥）
```bash
# 设置数据库连接（每台设备执行一次，之后永久生效）
# 设置数据库连接（每台设备执行一次，之后永久生效；先验证连接可用再写入）
secrets config set-db "postgres://postgres:<password>@<host>:<port>/secrets"
# 查看当前配置（密码脱敏）