Skip to content

fix(langfuse): generate a 64-character hex encryption key - #12207

Merged
andrasbacsai merged 1 commit into
mainfrom
issue-8797-bug-langfuse-service-password-64
Oct 19, 2026
Merged

andrasbacsai merged 1 commit into
mainfrom
issue-8797-bug-langfuse-service-password-64

Conversation

@andrasbacsai

Copy link
Copy Markdown
Member

Summary

  • Langfuse needs ENCRYPTION_KEY to be 64 hex characters (256 bits). The template set it from SERVICE_PASSWORD_64_LANGFUSE, which produces a 64-character password with non-hex characters. Langfuse rejected that value, so adding an LLM connection (for example, an OpenAI API key) failed with an invalid key length error.
  • ENCRYPTION_KEY now comes from SERVICE_HEX_64_ENCRYPTIONKEY, which generates a valid 64-character hex string. This matches the manual workaround from the issue (openssl rand -hex 32).
  • Rebuilt the base64-encoded Langfuse compose in service-templates.json and service-templates-latest.json.

fixes #8797

Notes

  • The change applies to new Langfuse deployments.
  • Existing deployments that already hit this error can replace ENCRYPTION_KEY with the output of openssl rand -hex 32. Any secrets Langfuse encrypted with the old key (such as saved LLM connection keys) may need to be entered again.

Fixes #8797

@andrasbacsai
andrasbacsai merged commit 2d2bf48 into main Oct 19, 2026
2 checks passed
@andrasbacsai
andrasbacsai deleted the issue-8797-bug-langfuse-service-password-64 branch October 19, 2026 15:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[Bug]: Langfuse-SERVICE_PASSWORD_64_LANGFUSE is not generating 64 char key

1 participant