3 ms·

What's a best practice that doesn't use this Docker-specific feature ?

• wolco 6y ago
  Use a config file not checked into git
  • jimktrains2 6y ago
    This comes back to where does the config file live and how is it managed?
    • linkdd 6y ago
      The plain config file must live in memory (tmpfs). The encrypted config file on a hard drive that is accessed only to decrypt the file to memory.
      • jimktrains2 6y ago
        No, I mean management of the secrets. Though it is a rather moot point as the same problems apply to most systems anyway.
        • wolco 6y ago
          Wiki protected pages by role. When roles change so do passwords.