0
Fork 0
mirror of https://github.com/withastro/astro.git synced 2025-02-03 22:29:08 -05:00
astro/.changeset/four-tips-accept.md
Matthew Phillips bd1d4aaf82
Allow passing into the crypto key via ASTRO_KEY (#11879)
* Allow passing into the crypto key via ASTRO_KEY

* Add a changeset

* Add test

* Use the node package

* omg

* Create a new create-key command

* linting

* lint again

* Update the changeset
2024-09-06 12:41:39 -04:00

651 B

astro
patch

Allow passing a cryptography key via ASTRO_KEY

For Server islands Astro creates a cryptography key in order to hash props for the islands, preventing accidental leakage of secrets.

If you deploy to an environment with rolling updates then there could be multiple instances of your app with different keys, causing potential key mismatches.

To fix this you can now pass the ASTRO_KEY environment variable to your build in order to reuse the same key.

To generate a key use:

astro create-key

This will print out an environment variable to set like:

ASTRO_KEY=PIAuyPNn2aKU/bviapEuc/nVzdzZPizKNo3OqF/5PmQ=