Developers who are familiar with the “twelve-factor” app know that configuration should be stored in the environment (loaded via env vars), not in the code. If you’re writing a Rails application you may want to use the dotenv
gem, which allows you to store env variable in a handy series of files such as .env, .env.development, .env.test
and so on. You can read the gem readme for all the details.
Since configuration varies with time and you may be working with many other developers, it is quite handy to store these env files in your git repository, but there’s a big caveat: you should not store passwords, secrets and tokens inside a git repo for security reasons, unless they’re encrypted.
Continue reading “Storing encrypted configuration in your git repo with DotenvSekrets”