5 ms·
Shameless plug, but we built EnvKey[1] for exactly this purpose. Instead of providing secrets directly to a server, you generate an ENVKEY token which is used
by danenania 5y ago
Shameless plug, but we built EnvKey[1] for exactly this purpose.
Instead of providing secrets directly to a server, you generate an ENVKEY token which is used to fetch and decrypt the app’s secrets/config and supply them as environment variables to the process.
The ENVKEY still needs to be protected, but you can limit which IPs can access it and if access is cut off, the process will be killed and secrets cleared immediately, so you do get some additional protection. All access attempts are also logged.
1 - https://envkey.com https://envkey.com