4 ms·
Ask HN: How do you store secret site credentials?
The default option seems to be just put your secrets in the cloud somewhere. Other options seem to involve using a vault like 1Password (clunky), or gpg & file encryption (messy). It seems that Hashicorp's Vault should do this, but I can't quite figure how.
Is there a good way to have credentials somehow checked in with your code?
- mattbillenstein 7y agoWe encrypt them with a secret not in the repo itself - part of our deploy decrypts them as-needed. edit: scripted in python via pynacl...
- tekronis 7y agoIf you're using AWS, you can use Secrets Manager: https://aws.amazon.com/secrets-manager/ https://aws.amazon.com/secrets-manager/