Promises
How secrets are managed
The secrets that run Hako CMS (database keys and tokens for outside services) are created and rotated with tegata, a tool hodomaru built. When a key is rotated, the previous key stays readable, so keys can be rotated without stopping the service. tegata’s source is available, so anyone can check how the keys are handled.
resources:
session_key:
provider: random
config: { bytes: 32 }
stores:
main:
- { name: SESSION_KEY, readers: [app] }
previous: { name: PREVIOUS_SESSION_KEY } # read by the readers of SESSION_KEY
How we decide
I want to be someone who provides the products people need at the lowest price in the world, with integrity. No features that aren’t needed, no price increases, no lock-in. And to keep the business going anyway, I want to refine every part of how the work is done.
Operator
Kohei Kawasaki. Started hodomaru after working at Cybozu and Recruit.
Contact
contact@hodomaru.com. See Contact for each topic.