dokploy/packages/server/src/lib/encryption-secret.ts

import { readSecret } from "../db/constants";

const { ENCRYPTION_KEY, ENCRYPTION_KEY_FILE } = process.env;

function resolveEncryptionSecret(): string | undefined {
	if (ENCRYPTION_KEY) {
		return ENCRYPTION_KEY;
	}
	if (ENCRYPTION_KEY_FILE) {
		return readSecret(ENCRYPTION_KEY_FILE);
	}
	return undefined;
}

export const encryptionSecret = resolveEncryptionSecret();