Jeroen UbbinkandClaude Opus 4.8 56a67c0a86 fix(settings): fail fast when an nsec is set but ROUTSTR_SECRET_KEY is missing ...

Encryption of the Nostr identity at rest is mandatory. When a legacy nsec is
present (env or blob) but no ROUTSTR_SECRET_KEY is set, bootstrap previously
fell into vault.encrypt and surfaced its generic "key not set" error. Raise an
explicit, nsec-contextual error first so the boot failure is intentional and
actionable — it names the missing key and prints the generation command —
rather than relying on vault throwing incidentally. No secret is dropped: the
node refuses to start until the operator sets the key.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-07-23 10:51:20 +02:00

..

integration

fix(settings): fail fast when an nsec is set but ROUTSTR_SECRET_KEY is missing

2026-07-23 10:51:20 +02:00

unit

fix(settings): keep upstream_api_key in the settings blob

2026-07-23 10:51:20 +02:00

conftest.py

feat(db): add encrypted Secret store and migration

2026-07-23 10:50:51 +02:00

run_integration.py

dump wip stash

2025-08-06 20:31:55 -03:00