search

onebeyond / rascal

A config driven wrapper for amqp.node supporting multi-host connections, automatic error recovery, redelivery flood protection, transparent encryption / decryption and channel pooling.
MIT License
451 stars 69 forks source link

Protect passwords and secrets in the config file #182

Closed yoav-melamed closed 2 years ago

yoav-melamed commented 2 years ago

Hi, What is the best practice for protecting passwords and secrets in the rascal file so it will be a) not be pushed to git b) not be exposed so easily

Thanks!

cressie176 commented 2 years ago

Hi @yoav-melamed,

Password management is a general problem rather than something specific to Rascal, so this probably isn't the best place to post questions of such nature.

That said, I tend to take a layered or hierarchical approach to configuration using confabulous, where safe configuration is checked in, then augmented at deployment time through additional configuration files or environment variables. You can find an explanation of the approach here, but I should warn you, it deliberately violates principle 3 of 12 factor apps.