Closed matthewadams closed 1 year ago
They're fine for insensitive values and defaults. For secrets (tokens, passwords, etc), environment variables are more common. Plus, it abides by 12-factor principles better -- see 12factor.net.
Further, env vars should actually override values on disk, normally, so I'd rather change that now.
Ok, addressed all comments & changed behavior to consider env vars before file config, as is convention in 12-factor apps.
Closes #1