From 524f060d678f3f6c08f43b8bb96609f3c31a0941 Mon Sep 17 00:00:00 2001
From: Tom Hughes <tom@compton.nu>
Date: Sat, 4 Jul 2026 14:48:01 +0100
Subject: [PATCH] Configure encryption for pgbackrest on dev servers

---
 roles/dev.rb | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/roles/dev.rb b/roles/dev.rb
index d3085f843..dfc8cf407 100644
--- a/roles/dev.rb
+++ b/roles/dev.rb
@@ -173,6 +173,8 @@ default_attributes(
       :credentials_item => "aws",
       :repo_type => "s3",
       :repo_path => "/",
+      :repo_cipher_type => "aes-256-cbc",
+      :repo_cipher_pass => "wal_encryption_key",
       :repo_s3_bucket => "openstreetmap-wal-dev-1a05a5",
       :repo_s3_endpoint => "s3.eu-north-1.amazonaws.com",
       :repo_s3_key => "wal_access_key_id",
-- 
2.47.3