4 ms·
Put your passwords in env vars people. By that I mean your web server-to-db connection or 3rd party api passwords. See 12factor.net . Then you can still store
by elchief 11y ago
Put your passwords in env vars people. By that I mean your web server-to-db connection or 3rd party api passwords. See 12factor.net .
Then you can still store your config files in git.
- jsmeaton 11y agoI still haven't seen or found a good way to deploy secrets in environment variables. My current practise is to keep secrets in a file on the build server, and the build server is responsible for positioning it correctly.
- dvanduzer 11y agoWhy would you need secrets on a build server? If you need that much trust between your production servers, you should be using some external mechanism, which issues credentials with sensible lifetimes.
- jsmeaton 11y agoThe build server also does deployment. The deployment task positions the secrets for the app onto the appserver.