9 ms·
"The environment" is not "environment variables" and not ".env files" For cloud services, it would typically be called a vault. But it could also be a hardware
by stephbook 19d ago
"The environment" is not "environment variables" and not ".env files"
For cloud services, it would typically be called a vault. But it could also be a hardware security module (HSM) with bring-your-own-key (BYOK, eg for certificates.)
Ansible also calls it a vault and encrypts it with a password — that file you can check into version control.
- nebezb 19d agoConfidently wrong. Did you read the source I linked? > The twelve-factor app stores config in environment variables
- dewey 19d agoThe vault of the cloud provider would just inject the value of the environment variable securely so it doesn't have to be stored on-disk. What the parent poster wrote isn't wrong.
- nebezb 19d agoThe parent poster is wrongly quoting me to say the original post doesn't mean “env var”. Yes, it does mean env var.
- stephbook 19d agoNo, they are not stored permanently on disk according to 12f. They are only injected for the lifetime of the application and destroyed when stopped. It's not okay to store your secret on your own machine disk's .bashrc forever. It seems we're in agreement anyway.
- minitech 19d ago> "The environment" is not "environment variables" and not ".env files" Is there confusion because an extra “not” leaked in?