coder/docs/reference/cli/server_dbcrypt_rotate.md

server dbcrypt rotate

Rotate database encryption keys.

Usage

coder server dbcrypt rotate [flags]

Options

--postgres-url

Type	string
Environment	$CODER_PG_CONNECTION_URL

The connection URL for the Postgres database.

--postgres-connection-auth

Type	password|awsiamrds
Environment	$CODER_PG_CONNECTION_AUTH
Default	password

Type of auth to use when connecting to postgres.

--new-key

Type	string
Environment	$CODER_EXTERNAL_TOKEN_ENCRYPTION_ENCRYPT_NEW_KEY

The new external token encryption key. Must be base64-encoded.

--old-keys

Type	string-array
Environment	$CODER_EXTERNAL_TOKEN_ENCRYPTION_ENCRYPT_OLD_KEYS

The old external token encryption keys. Must be a comma-separated list of base64-encoded keys.

-y, --yes

Type	bool

Bypass confirmation prompts.