Re:The Twelve-Factor App
by dathinab on Thursday October 12, 2023 @11:45AM
(#37858800)
it's both true
putting any form of secrets into a env var is deeply insecure
using env is the most simple uniformly available way to have configs
through I would take it a step further, anything which must not be leaked probably should not be in any config, weather env or file or similar, it should be injected through other means if viable
putting any form of secrets into a env var is deeply insecure
using env is the most simple uniformly available way to have configs
through I would take it a step further, anything which must not be leaked probably should not be in any config, weather env or file or similar, it should be injected through other means if viable