Per-site secrets, minted in the Durable Object and never in the shipped payload.
Assets are public and identical on every site, so a secret in assets/ is everyone's. Only the
hash salt needs minting here: Drupal regenerates the private key itself, while
Settings::getHashSalt() throws on an empty salt and only the installer (which never runs here)
makes one. The salt signs login links and form tokens.
Per-site secrets, minted in the Durable Object and never in the shipped payload.
Assets are public and identical on every site, so a secret in
assets/is everyone's. Only the hash salt needs minting here: Drupal regenerates the private key itself, whileSettings::getHashSalt()throws on an empty salt and only the installer (which never runs here) makes one. The salt signs login links and form tokens.