Re:One in every 600 websites has .git exposed
by dangero on Sunday July 26, 2015 @09:33PM
(#9952926)
How do you communicate that data amongst team members then?
[ Parent
| on HN ]
Re:One in every 600 websites has .git exposed
by bobwaycott on Sunday July 26, 2015 @10:27PM
(#9953057)
As I detailed in my other response to your original question, use an example config file that is version controlled. It includes all the necessary config keys, but example-only values. All team members would then be able to easily create a local config file based on the example that works. You can even document the config with comments in the example file so devs know what is needed and what it's for.
Re:One in every 600 websites has .git exposed
by whoisthemachine on Sunday July 26, 2015 @10:18PM
(#9953031)
I think at one point, if you have a shared password for a development DB, production DB, etc. then just keeping those on a pen and paper notebook is your best solution. Usually, for shared environments such as that (although I hope the team can set-up their own DB's for development!), the number of shared "secrets" is relatively small. Some secrets are best not stored electronically, especially if they can give away user data.