Environment Variables Considered Harmful for Your Secrets

Re:Environment Variables Considered Harmful for Your Secrets by flavor8 on Friday January 02, 2015 @07:42AM (#8826553)

I typically store the env _name_ in the environment, and then use that in my apps to build a path to the file containing secrets (e.g. /etc/{mycompany}/{environment}/myapp.conf). The file is locked down by ACLs or permissions.

[ Parent | on HN ]

Re:Environment Variables Considered Harmful for Your Secrets by drblast on Friday January 02, 2015 @02:44PM (#8828149)

If I set _name_ to "../../blackhat/myhackedconfig/" will that cause problems?

[ Parent | on HN ]

Re:Environment Variables Considered Harmful for Your Secrets by mreinsch on Friday January 02, 2015 @08:14AM (#8826627)

as long as you don't store your config then in the same repository as your code, that works fine for me.

[ Parent | on HN ]