From b542c5589c1d6e5d1955f2155e07a70e8606568b Mon Sep 17 00:00:00 2001
From: Fang-Pen Lin <hello@fangpenlin.com>
Date: Mon, 27 Oct 2025 17:00:42 -0700
Subject: [PATCH] Add encrypted eab secret for auth

---
 backend/src/db/migrations/20251027234547_add-pki-acme.ts | 1 +
 1 file changed, 1 insertion(+)

diff --git a/backend/src/db/migrations/20251027234547_add-pki-acme.ts b/backend/src/db/migrations/20251027234547_add-pki-acme.ts
index 81a3ea82b..a5aba5d25 100644
--- a/backend/src/db/migrations/20251027234547_add-pki-acme.ts
+++ b/backend/src/db/migrations/20251027234547_add-pki-acme.ts
@@ -7,6 +7,7 @@ export async function up(knex: Knex): Promise<void> {
   if (!(await knex.schema.hasTable(TableName.PkiAcmeEnrollmentConfig))) {
     await knex.schema.createTable(TableName.PkiAcmeEnrollmentConfig, (t) => {
       t.uuid("id", { primaryKey: true }).defaultTo(knex.fn.uuid());
+      t.binary("encryptedEabSecret").notNullable();
 
       t.timestamps(true, true, true);
     });