4 ms·
I really wanted this to be a service that manages environment variables locally and in the cloud. When we've set this up in the past, it was a bit of a pain to
by pedalpete 3y ago
I really wanted this to be a service that manages environment variables locally and in the cloud.
When we've set this up in the past, it was a bit of a pain to have local envs, and cloud envs, and the build system needs to get the cloud ones, etc. etc.
- mnahkies 3y agoI've found this is largely solved by strictly separating plain config and secrets, and then having secrets pull from GCP secret manager / vault / whatever. You can then commit all the config (including the secret identifiers) and it all just works so long as you're authenticated with your secret storage system. We do this for the live configuration as well in line with Gitops and find it to work well. If you don't want to use a cloud secret manager you can also use something like https://github.com/getsops/sops https://github.com/getsops/sops to commit the encrypted secrets safely
- aradox66 3y agoThis is the way
- shayneo 3y agoYou might be looking for something like https://www.doppler.com/ https://www.doppler.com/ Though I could see adding “teams” features to shello that help with syncing and cloud environments
- vmatsiiako 3y agoCheck out Infisical (https://infisical.com https://infisical.com)