10.2. Connecting to your database by using the stored systemd-creds passwords

Procedure

1. Access your database configuration file at /etc/xdg/command-line-assistant/config.toml.

2. Remove the username and password parameters from the [database] section, for example:

   [database]
   type = "postgresql"
   host = "localhost"
   port = "5432"
   database = "history"

   注意

   If you leave the username and password in the configuration file, these credentials take precedence over the systemd-creds tool.

3. Generate encrypted credentials for your username or password. The following example uses systemd-ask-password commands. The name must follow the schema of database-username and database-password, otherwise, clad does not load the credentials properly.

   1. To generate an encrypted username, run the following command:

      $ systemd-ask-password -n | ( echo "[Service]" && systemd-creds encrypt --name=<database_username> -p - - ) >/etc/systemd/system/clad.service.d/<username>.conf

   2. To generate an encrypted password, run the following command:

      $ systemd-ask-password -n | ( echo "[Service]" && systemd-creds encrypt --name=<database_password> -p - - ) >/etc/systemd/system/clad.service.d/<password>.conf

4. After updating the database credentials, reload systemd and restart the clad daemon to apply the changes:

   $ sudo systemctl daemon-reload
   $ sudo systemctl restart clad