Skip to content

Commit

Permalink
Update encrypt-backups.md
Browse files Browse the repository at this point in the history
Updated docs to reflect changes made in #530
  • Loading branch information
danial23 authored Mar 2, 2025
1 parent 89655e0 commit 7c2e7e8
Showing 1 changed file with 2 additions and 4 deletions.
6 changes: 2 additions & 4 deletions docs/how-tos/encrypt-backups.md
Original file line number Diff line number Diff line change
Expand Up @@ -21,12 +21,10 @@ gpg -o backup.tar.gz -d backup.tar.gz.gpg

## Using age encryption

{: .note }
Even though the `age` CLI tools supports encryption using SSH keys, this is not supported by this tool.
`AGE_PUBLIC_KEYS` currently expects `age` keys to be given.

age allows backups to be encrypted with either a symmetric key (password) or a public key. One of those options are available for use.

Given `AGE_PASSPHRASE` being provided, the backup archive will be encrypted with the passphrase and saved as a `.age` file instead. Refer to age documentation for how to properly decrypt.

Given `AGE_PUBLIC_KEYS` being provided (allowing multiple by separating each public key with `,`), the backup archive will be encrypted with the provided public keys. It will also result in the archive being saved as a `.age` file.

You can use SSH keys in addition to `age` keys for encryption; `AGE_PUBLIC_KEYS` accepts both.

0 comments on commit 7c2e7e8

Please sign in to comment.