A documentação está disponível em inglês.

Secrets (Wonder Config)

Wonder Config stores encrypted secret values for your account — VPN pre-shared keys, database passwords, API tokens and app configuration. You create a named parameter once and reference it by name from products that support it (for example VPN).

Values are encrypted at rest. List and get without --reveal return metadata only.

Parameter list

The Wonder Config page lists parameter names and descriptions without exposing their values. Use it to identify reusable configuration and remove values that are no longer referenced.

Create parameter

Enter a unique name, secret value and optional description. The value is encrypted when submitted and is not displayed in the list afterward. Use descriptive names that make the parameter's purpose clear without including the secret itself.

What you get

  • A unique name (identifier used in references)
  • An encrypted value (entered only at create time in the console; revealed later via audited reveal)
  • Optional description

Create in the console

  1. Open Cloud → Wonder Config.
  2. Click Create parameter (or equivalent create action).
  3. Enter:
    • Name — starts with a letter or _; letters, digits, _ and - (see form validation)
    • Value — the secret itself
    • Description — optional note
  4. Submit.

The value is not shown again in the list. Copy it elsewhere if you need an offline copy. Other forms (for example VPN connection create) can pick an existing Wonder Config secret instead of typing a PSK inline.

Create with CLI

wcc config create \
  --name VPN_OFFICE_PSK \
  --value 'replace-with-strong-secret' \
  --description 'IPsec PSK for office tunnel'

List and read metadata:

wcc config list
wcc config get --name VPN_OFFICE_PSK

Decrypt (audited server-side):

wcc config reveal --name VPN_OFFICE_PSK
# or:
wcc config get --name VPN_OFFICE_PSK --reveal

Settings

| Field | Description | |---|---| | Name | Identifier used when referencing the secret | | Value | Entered at create time; encrypted at rest | | Description | Optional note |

Tips

  • Prefer Wonder Config for VPN PSKs so you are not pasting long secrets into every form.
  • To rotate: create a new parameter, update dependents to the new name/id, then delete the old one when unused.
  • Every reveal is audited — treat reveal as a privileged action.

Next