3 ms·
Secrets.yml is in .gitignore by default, while secret_token.rb is not, right? Most (beginner) programmers don't think to implement something like Foreman which
by eggbrain 13y ago
Secrets.yml is in .gitignore by default, while secret_token.rb is not, right? Most (beginner) programmers don't think to implement something like Foreman which handles their secret tokens / API keys and commit them straight into their code. With it being standard in the Rails app, gems can rely on sending their secret keys into a file they know will not be committed by default.
As is, you need to remember to dig through all your initializers and copy out all the tokens (Devise, Omniauth, etc) and put them in a .env file
- rubiquity 13y agoThat's fair. I can agree it is a nice optimization for the beginner Rails developer.
- Podeau 13y agosecrets.yml is not in .gitignore by default
- eggbrain 13y agoJust checked -- you are right. I was using Rails Composer for one of the apps I checked, which does include it by default.
- Podeau 13y agoThey also removed database.yml from the default .gitignore ... I don't understand why?
- arnvald 13y agoThat makes sense, since database.yml is not going to contain any sensitive data anymore (passwords and usernames will be stored in secrets.yml), this file can be safely stored in repository.