7 ms·
Store the encrypted env file (ejson is good) in your project and have a shared 1Password key to decrypt them.
by elliot07 2y ago
Store the encrypted env file (ejson is good) in your project and have a shared 1Password key to decrypt them.
- timwis 2y agoRecent versions of rails takes this approach. But I’ve wondered: is it possible to avoid copying the key onto disk, and leave it in 1Password, eg via their cli?
- tomknig 2y agoYes, it is possible to inject secrets directly into a subprocess without writing them to disk via op run. Also see https://news.ycombinator.com/item?id=41482194 https://news.ycombinator.com/item?id=41482194 … we responded to the parent around the same time :D