| @@ -43,7 +43,7 @@ matrix_synapse_ext_synapse_s3_storage_provider_config_storage_class: STANDARD # | |||||
| # This is not recommended unless you understand what you are doing, and may make restoring from backups additionally challenging | # This is not recommended unless you understand what you are doing, and may make restoring from backups additionally challenging | ||||
| # You can read more about SSE-C here: https://docs.aws.amazon.com/AmazonS3/latest/userguide/ServerSideEncryptionCustomerKeys.html | # You can read more about SSE-C here: https://docs.aws.amazon.com/AmazonS3/latest/userguide/ServerSideEncryptionCustomerKeys.html | ||||
| matrix_synapse_ext_synapse_s3_storage_provider_config_sse_customer_enabled: true | matrix_synapse_ext_synapse_s3_storage_provider_config_sse_customer_enabled: true | ||||
| matrix_synapse_ext_synapse_s3_storage_provider_config_sse_customer_key: ssec-key-goes-here # Generate with: cat /dev/urandom | head -c 32 | base64 - | |||||
| matrix_synapse_ext_synapse_s3_storage_provider_config_sse_customer_key: ssec-key-goes-here # Generate with: cat /dev/urandom | base64 | head -c 32 | |||||
| matrix_synapse_ext_synapse_s3_storage_provider_config_sse_customer_algo: AES256 | matrix_synapse_ext_synapse_s3_storage_provider_config_sse_customer_algo: AES256 | ||||
| # Using the git version is also required until > v1.1.2 is released | # Using the git version is also required until > v1.1.2 is released | ||||
| matrix_synapse_ext_synapse_s3_storage_provider_version: git | matrix_synapse_ext_synapse_s3_storage_provider_version: git | ||||
| @@ -6,7 +6,7 @@ ENDPOINT={{ matrix_synapse_ext_synapse_s3_storage_provider_config_endpoint_url } | |||||
| BUCKET={{ matrix_synapse_ext_synapse_s3_storage_provider_config_bucket }} | BUCKET={{ matrix_synapse_ext_synapse_s3_storage_provider_config_bucket }} | ||||
| {% if matrix_synapse_ext_synapse_s3_storage_provider_config_sse_customer_enabled %} | {% if matrix_synapse_ext_synapse_s3_storage_provider_config_sse_customer_enabled %} | ||||
| SSE_CUSTOMER_KEY={{ matrix_synapse_ext_synapse_s3_storage_provider_config_sse_customer_key | b64decode }} | |||||
| SSE_CUSTOMER_KEY={{ matrix_synapse_ext_synapse_s3_storage_provider_config_sse_customer_key }} | |||||
| SSE_CUSTOMER_ALGO={{ matrix_synapse_ext_synapse_s3_storage_provider_config_sse_customer_algo }} | SSE_CUSTOMER_ALGO={{ matrix_synapse_ext_synapse_s3_storage_provider_config_sse_customer_algo }} | ||||
| {% endif %} | {% endif %} | ||||
| @@ -10,7 +10,7 @@ config: | |||||
| secret_access_key: {{ matrix_synapse_ext_synapse_s3_storage_provider_config_secret_access_key | to_json }} | secret_access_key: {{ matrix_synapse_ext_synapse_s3_storage_provider_config_secret_access_key | to_json }} | ||||
| {% if matrix_synapse_ext_synapse_s3_storage_provider_config_sse_customer_enabled %} | {% if matrix_synapse_ext_synapse_s3_storage_provider_config_sse_customer_enabled %} | ||||
| sse_customer_key: {{ matrix_synapse_ext_synapse_s3_storage_provider_config_sse_customer_key | b64decode | to_json }} | |||||
| sse_customer_key: {{ matrix_synapse_ext_synapse_s3_storage_provider_config_sse_customer_key | to_json }} | |||||
| sse_customer_algo: {{ matrix_synapse_ext_synapse_s3_storage_provider_config_sse_customer_algo | to_json }} | sse_customer_algo: {{ matrix_synapse_ext_synapse_s3_storage_provider_config_sse_customer_algo | to_json }} | ||||
| {% endif %} | {% endif %} | ||||