correct syntax for DARE kms configuration in sftpgo.json?

[OliverAbraham]

Hello,
I'm trying to use the data at rest encryption (DARE) feature with a hard coded password.
But it has no effect. Files are still stored unencrypted.

I've created a file named "DareMasterKey" with a password. And my configuration is:
"kms": {
"secrets": {
"url": "",
"master_key_path": "/var/lib/sftpgo/DareMasterKey",
}
}

What am I doing wrong?

Best regards
Oliver

[drakkan]

Hi,

you are setting the kms master key, please take a look here for more details.

To use the cryptfs you have to enable it on a per-user basis, for example using the web admin, take a look at the following screenshot:

each file will be encrypted using a different key