4 ms·
Encryption-at-rest help all that much, no. What do you need and what are you worried about? A local git repo backed up to Tarsnap is pretty secure and unlikely
by JoachimSchipper 11y ago
Encryption-at-rest help all that much, no.
What do you need and what are you worried about? A local git repo backed up to Tarsnap is pretty secure and unlikely to lose your data, but may not fit your needs.
- unclebucknasty 11y agoThanks. Need versioning and backup for local code, plus the ability to add remote devs to the team as needed. Mainly concerned about a plaintext version of our configuration info, third-party api access keys, etc. hanging out in a repo somewhere. Whether via malicious internal staff or straight-up hacking, I would rather the files be encrypted.
- JoachimSchipper 11y agoIf you're planning to work with minimally-vetted freelancers or otherwise need to consider malicious internal stuff, strongly consider injecting sensitive data like database passwords via e.g. environment variables instead of storing them in the repository at all. Rails etc. should make this easy. (Of course, your system administrator can still read that data, but that's pretty much unavoidable.) (This is a best - and common - practice for exactly the reasons you hint at.)
- unclebucknasty 11y agoThanks for the feedback.