3 ms·
> It's statically linked, and [...] secrets [...] are compiled into the binary Depends a lot on what you're doing this for; in particularly for personal stuff
by dcminter 3y ago
> It's statically linked, and [...] secrets [...] are compiled into the binary
Depends a lot on what you're doing this for; in particularly for personal stuff then you do you - but this particular item does give me pause.
But then I use AWS for pretty much all my personal stuff, so I guess I have the overkill mindset already?
- lockhouse 3y agoDo you use LightSail or is it just regular AWS? I’ve never used LightSail but it looks like a good deal.
- dcminter 3y agoNope - in fact right now I'm not running much at all; just some static hosting with S3 and CloudFront which costs pennies a month. For a blog that's pretty much write-only and that not very often. When I'm playing with more complex stuff I spin up an ECS with Fargate hosted containers. That's mostly for fun though.
- rmilejczz 3y agoCloudformation gang represent
- AlexITC 3y agoThe way I do it is to set the `EnvironmentFile` entry in the service definition. I'd guess that the author's idea is that if someone gains access to the server, the secrets would be either dumped from the binary or the environment file, if so, why to bother with another file?