[onboarding] review and run project

podcodar / webapp

PodCodar WebApp

https://podcodar.org

GNU General Public License v2.0

6 stars 1 forks source link

[onboarding] review and run project #171

Open marco-souza opened 1 week ago

marco-souza commented 1 week ago

Clone and run our webpp projects

access https://github.com/podcodar/webapp
clone
install dependencies (yarn or bun install)
decrypt var envs (bun decrypt)
run project (bun dev)

marco-souza commented 6 days ago

@AlexKHecht how is it going? Let me know if you need any help with your setup.

Also, as an additional task, it would be great if you could participate in code reviews. There are a few discussions that I believe would be beneficial for your onboarding.

AlexKHecht commented 1 day ago

@AlexKHecht how is it going? Let me know if you need any help with your setup.

Also, as an additional task, it would be great if you could participate in code reviews. There are a few discussions that I believe would be beneficial for your onboarding.

Thanks ! Tbh all of this is very new to me —including your message that I've just discovered, my bad— which is taking some getting used to. I'll try to participate in some way in the code reviews, thanks @marco-souza !

AlexKHecht commented 1 day ago

Btw, I've finished setting up the the webapp, and I've created a branch to update the repo's readme to include some Windows specific stuff. I'll link the PR back to this issue, what do you think ?

vzsoares commented 1 day ago

Genius thing to gpg the .env. Just made me want to use it everywhere, but is it safe?? What about brute force? Should i thrust this method for things like db passwords? @marco-souza

vzsoares commented 1 day ago

Clone and run our webpp projects

access https://github.com/podcodar/webapp

clone

install dependencies (yarn or bun install)

decrypt var envs (bun decrypt)

run project (bun dev)

better version!?

git clone https://github.com/podcodar/webapp.git
install dependencies (yarn or bun install)
decrypt var envs (yarn or bun decrypt)
run project (yarn or bun dev)

marco-souza commented 20 hours ago

Just made me want to use it everywhere

@vzsoares - It is safe as soon as we don't share the password with anyone haha - for small projects and development environments it is safe enough

we cannot break gpg by brute force with passwords >= 12 characters
gpg is used to encrypt data for ssh and other protocols

Should i thrust this method for things like db passwords?

Yeah, if our password leaks, we will be in a bad spot. Unauthorized people could access our credentials. there is nothing we can do