From dd4b13cbd844290698b4f0a4afac83f82c7ef68e Mon Sep 17 00:00:00 2001
From: Niklas van Schrick <mc.taucher2003@gmail.com>
Date: Thu, 25 Jun 2026 19:14:35 +0200
Subject: [PATCH] Add config options for sagittarius db encryption and thread
 counts

---
 .../templates/sagittarius.sagittarius.yml.erb            | 8 +++++++-
 docker-compose/.env                                      | 9 +++++++++
 2 files changed, 16 insertions(+), 1 deletion(-)

diff --git a/container/config-generator/templates/sagittarius.sagittarius.yml.erb b/container/config-generator/templates/sagittarius.sagittarius.yml.erb
index 38757659..090b46c8 100644
--- a/container/config-generator/templates/sagittarius.sagittarius.yml.erb
+++ b/container/config-generator/templates/sagittarius.sagittarius.yml.erb
@@ -2,10 +2,16 @@ rails:
   web:
     force_ssl: false
   log_level: <%= env('SAGITTARIUS_LOG_LEVEL', 'info') %>
-  threads: 3
+  threads: <%= env('SAGITTARIUS_RAILS_THREADS', '3') %>
   db:
     host: <%= env!('POSTGRES_HOST') %>
     port: <%= env!('POSTGRES_PORT') %>
+    pool_size: <%= env('SAGITTARIUS_DB_POOL_SIZE', '5') %>
+    encryption:
+      primary_key: <%= env!('SAGITTARIUS_DB_ENCRYPTION_PRIMARY_KEY') %>
+      deterministic_key: <%= env!('SAGITTARIUS_DB_ENCRYPTION_DETERMINISTIC_KEY') %>
+      key_derivation_salt: <%= env!('SAGITTARIUS_DB_ENCRYPTION_KEY_DERIVATION_SALT') %>
+  secret_key_base: <%= env!('SAGITTARIUS_RAILS_SECRET_KEY_BASE') %>
 
 velorum:
 <% velorum_enabled = env_set?('VELORUM_ENABLED') ? env?('VELORUM_ENABLED') : env('COMPOSE_PROFILES', '').include?('ide_velorum') -%>
diff --git a/docker-compose/.env b/docker-compose/.env
index e05acfd6..624dd326 100644
--- a/docker-compose/.env
+++ b/docker-compose/.env
@@ -33,6 +33,13 @@ IMAGE_TAG=
 # ce or ee
 IMAGE_EDITION=
 
+# Sagittarius config
+# change these to new secret values
+SAGITTARIUS_DB_ENCRYPTION_PRIMARY_KEY=YzaMv4bXYK84unYIQI4Ms4sV3ucbvWs0
+SAGITTARIUS_DB_ENCRYPTION_DETERMINISTIC_KEY=jgTaxTqzM15ved1S8HdXrqrjfCfF5R0h
+SAGITTARIUS_DB_ENCRYPTION_KEY_DERIVATION_SALT=Z6zcLTgobXLYjXUslRsLMKxvXKq3j6DJ
+SAGITTARIUS_RAILS_SECRET_KEY_BASE=MVMD6CtQwEWrQ28TdokQakbG2FG5abOn
+
 # Velorum config
 # VELORUM_ENABLED=false (override, default checks if COMPOSE_PROFILES contains ide_velorum)
 VELORUM_HOST=velorum
@@ -61,6 +68,8 @@ SAGITTARIUS_CABLE_PORT=3000
 SAGITTARIUS_GRPC_HOST=sagittarius-grpc
 SAGITTARIUS_GRPC_PORT=50051
 SAGITTARIUS_LOG_LEVEL=info
+SAGITTARIUS_RAILS_THREADS=3
+SAGITTARIUS_DB_POOL_SIZE=5
 SCULPTOR_HOST=sculptor
 SCULPTOR_PORT=3000
 POSTGRES_HOST=postgres