4 ms·
What do people here use to store password for servers ? Plain text configuration files ? I have pwd of DB in config files and found no way to put it elsewhere.
by eleumik 10y ago
What do people here use to store password for servers ? Plain text configuration files ? I have pwd of DB in config files and found no way to put it elsewhere.
- mkarazin 10y agoPlain text can work, assuming that it is access controlled in a secure environment. Often times, during the build process, a secure secret management system or process will handle the combining of the code with configuration. For example, your developer (with no secret access) could commit code and Jenkins can fetch the configuration file from a secure and access-controlled service. Then the built code has the secrets and the developer does not. There are a lot of approaches to doing it at scale. See https://gist.github.com/maxvt/bb49a6c7243163b8120625fc8ae3f3cd https://gist.github.com/maxvt/bb49a6c7243163b8120625fc8ae3f3... for a good overview.
- eleumik 10y agoThanks ! very nice overview.
- franciscop 10y agoEnvironment variables which depending on the host are done differently. For heroku it's a setting, for a bare bones server it'd be a plain file called .env.