14 ms·
I still haven't seen or found a good way to deploy secrets in environment variables. My current practise is to keep secrets in a file on the build server, and t
by jsmeaton 11y ago
I still haven't seen or found a good way to deploy secrets in environment variables. My current practise is to keep secrets in a file on the build server, and the build server is responsible for positioning it correctly.
- dvanduzer 11y agoWhy would you need secrets on a build server? If you need that much trust between your production servers, you should be using some external mechanism, which issues credentials with sensible lifetimes.
- jsmeaton 11y agoThe build server also does deployment. The deployment task positions the secrets for the app onto the appserver.