Passwords that are not tCMS's, which tCMS needs in order to do something on your behalf — the passphrase to the provisioner's secrets database, to begin with. Store one here and the next thing that needs it asks you for a TOTP code instead, which is a thing you have on you rather than a thing you have written down.
: if ( !$has_vault ) {
This installation has no vault key, so there is nowhere to keep a secret
and nothing below will save. See Trog::Vault: the key is
handed to the service by systemd, and without one the things that would
have used a stored secret go on asking for the password directly.
| Name | Stored | Last used | |
|---|---|---|---|
| <: $secret.name :> | <: $secret.stored :> | <: $secret.used :> | : # A row sealed under a key this installation no longer has : # is not going to open, and saying so beats letting somebody : # find out at the moment they were relying on it. : if ( !$secret.readable ) { unreadable : } |
Nothing stored.
: } : # No key, no form. Everything it could submit would be refused, and a form : # that cannot work is worse than no form: it reads as something that ought : # to have worked. : if ( $has_vault ) {Storing under a name that is already here replaces it. Nothing on this page ever shows a value back to you — if you have forgotten one, replace it.
: }