3 ms·
Env vars are fine for secrets, as long as you provide the right env vars to the right processes. You can unset them before launching a new process, or better st
by cjbprime 2y ago
Env vars are fine for secrets, as long as you provide the right env vars to the right processes. You can unset them before launching a new process, or better still, not "export" the sensitive ones to all processes.
- jimsmart 2y agoThis ^^ Just avoid putting secrets in the global environment if it is a concern, and instead just pass necessary secrets locally in the environment when launching a specific app.