start-os/backend/migrations/20230118185232_NetworkKeys.sql

-- Add migration script here
CREATE EXTENSION pgcrypto;

ALTER TABLE
    account
ADD
    COLUMN server_id TEXT,
ADD
    COLUMN hostname TEXT,
ADD
    COLUMN network_key BYTEA CHECK (length(network_key) = 32),
ADD
    COLUMN root_ca_key_pem TEXT,
ADD
    COLUMN root_ca_cert_pem TEXT;

UPDATE
    account
SET
    network_key = gen_random_bytes(32),
    root_ca_key_pem = (
        SELECT
            priv_key_pem
        FROM
            certificates
        WHERE
            id = 0
    ),
    root_ca_cert_pem = (
        SELECT
            certificate_pem
        FROM
            certificates
        WHERE
            id = 0
    )
WHERE
    id = 0;

ALTER TABLE
    account
ALTER COLUMN
    tor_key DROP NOT NULL,
ALTER COLUMN
    network_key
SET
    NOT NULL,
ALTER COLUMN
    root_ca_key_pem
SET
    NOT NULL,
ALTER COLUMN
    root_ca_cert_pem
SET
    NOT NULL;

CREATE TABLE IF NOT EXISTS network_keys (
    package TEXT NOT NULL,
    interface TEXT NOT NULL,
    key BYTEA NOT NULL CHECK (length(key) = 32),
    PRIMARY KEY (package, interface)
);