6 ms·
Environment variables should never be used. This was a known security hole already in the last century. Several OS solved this by config files that comes with f
by AtNightWeCode 3y ago
Environment variables should never be used. This was a known security hole already in the last century. Several OS solved this by config files that comes with file permissions. The correct solution on Linux and Windows at least. And still people use envs.
- 1letterunixname 3y agoThat's unrealistic and not scalable. Heroku and the 12factor pattern use this because it creates a boundary between values meant to be configured by the user and those internal to an application. Environment variables can be injected into a subprocess without them ever existing on disk.
- AtNightWeCode 3y agoEnvs are not process secure. Files are. Ram disks exists.