3 ms·
How do you guys, handle this problem? I use either `git-crypt` [1] or `ansible-vault` [2]. 1: https://github.com/AGWA/git-crypt https://github.com/AGWA/git-cr
by drinchev 10y ago
How do you guys, handle this problem?
I use either `git-crypt` [1] or `ansible-vault` [2].
1: https://github.com/AGWA/git-crypt https://github.com/AGWA/git-crypt
2: http://docs.ansible.com/ansible/playbooks_vault.html http://docs.ansible.com/ansible/playbooks_vault.html
- FanaHOVA 10y agoENV variables. I use `dotenv` in Ruby projects.
- StavrosK 10y agoYep, same here. I prefer git-crypt, but we use Ansible vault too.
- tildedash 10y agoI follow the 12 factor app methodology (https://12factor.net/ https://12factor.net/), everything in ENV.
- reitanqild 10y agoAnd it actually uses GPG : )
- dekz 10y ago.env or ENV with AWS KMS
- adamors 10y agoDotenv and Ansible vault, depending on the project. I also want to look into Hashicorp's Vault https://www.vaultproject.io https://www.vaultproject.io
- aequitas 10y agoFor puppet users: https://github.com/TomPoulton/hiera-eyaml https://github.com/TomPoulton/hiera-eyaml Advantage of this approach is it encrypts the values individually instead of per file. This way the secrets files are git/review friendly.