# this is the secret used for encrypting/decryting encrypted databags # https://docs.chef.io/data_bags.html#encrypt-a-data-bag-item # defaults to /etc/chef/encrypted_data_bag_secret encrypted_data_bag_secret '/path/to/file/with/secret'