3 ms·
I mean anything encrypted needs to be decrypted, meaning you have to... have the key stored in an environment variable on the server?
by stanmancan 6y ago
I mean anything encrypted needs to be decrypted, meaning you have to... have the key stored in an environment variable on the server?
- kevmo314 6y agoThis would at least alleviate having to know n different env secrets that need to be set.
- stanmancan 6y agoYeah, it’s convenient but it doesn’t solve the topic of the post, which is “you shouldn’t use environment variables for secret data”
- R0b0t1 6y agoInstall the secret for production. For testing you just lock/unlock the secret.
- rad_gruchalski 6y agoOr in a file, like ansible does it.