持久化数据保护

littletoxic · Nov 29, 2024 · 4f109b1 · 4f109b1
1 parent 3c4a96e
commit 4f109b1
Show file tree

Hide file tree

Showing 2 changed files with 12 additions and 1 deletion.
diff --git a/deploy/compose.yaml b/deploy/compose.yaml
@@ -1,3 +1,5 @@
+name: blog
+
 services:
   blog-server:
     image: littletoxic/blog-server
@@ -8,4 +10,9 @@ services:
       - "/dev/i2c-1:/dev/i2c-1"
     restart: unless-stopped
     # non-root 容器中获取足够权限访问设备
-    user: '1654:994'
+    user: '1654:994'
+    volumes:
+      - server-secrets:/secrets
+
+volumes:
+  server-secrets:
diff --git a/src/LTBlog/LTBlog/Program.cs b/src/LTBlog/LTBlog/Program.cs
@@ -1,6 +1,7 @@
 using LTBlog.Components;
 using LTBlog.Data;
 using LTBlog.Sensor;
+using Microsoft.AspNetCore.DataProtection;
 using Microsoft.EntityFrameworkCore;
 
 var builder = WebApplication.CreateBuilder(args);
@@ -24,6 +25,9 @@
 
 builder.Services.AddSensorWorker();
 
+builder.Services.AddDataProtection()
+    .PersistKeysToFileSystem(new("/secrets/DataProtection-Keys"));
+
 var app = builder.Build();
 
 // Configure the HTTP request pipeline.