2 ms·
I think it's confusing because it was really poorly phrased: 1. DON'T keep secrets in an environment variable It's a GOOD PRACTICE to have your object
by bheadmaster 4y ago
I think it's confusing because it was really poorly phrased:
1. DON'T keep secrets in an environment variable
It's a GOOD PRACTICE to have your objects use a secret in an environment variable
So which one is it? Don't keep secrets in env vars, or it's good practice to keep secrets in env vars?
- falcolas 4y agoPersonal opinion: the second. If the container is popped so you can read environment variables, you can read files too.
- mschuster91 4y agoNot always. Stuff like exposed debug toolbars or over-exposing stacktraces can leak environment variables, but (usually not) files.