2 ms·
I don't entirely understand this: > We add the sensitive environments to .gitignore; for us this is production.txt, qa.txt and staging.txt. These are never com
by teraflop 13y ago
I don't entirely understand this:
> We add the sensitive environments to .gitignore; for us this is production.txt, qa.txt and staging.txt. These are never committed.
> We get a history of changes in git (though it’s way more of a pain to use as you have to decrypt different versions)
So you have a history of changes, but only for the dev environment? Seems like that wouldn't be terribly useful, but maybe I'm missing something.
- ukd1 13y agoWe have the history of changes, but not diff-able. private/env/production.txt is not in git, however private/env/production.txt.asc is. It would be a pain to go through the diffs, but possible. Our production config has only been updated 35 times (this includes non-config updates like adding new keys).