samwilson / twyne

A web-based journal for writing and photography.
GNU General Public License v3.0
8 stars 1 forks source link

AWS secret should be hidden from view #122

Closed revi closed 3 years ago

revi commented 3 years ago

For now, AWS secret (which is equivalent for password) is visible. Should be treated as password (or become config file value).

image
samwilson commented 3 years ago

I'll move the filesystem config variables to the .env.local file; they're safer there, and there's no real need for them to be easily changeable via the UI.

samwilson commented 3 years ago

I've started this: #127

samwilson commented 3 years ago

Fixed. Sites will break now when upgraded, until the config is moved to .env.local, but I figure that's probably okay because Twyne is still not 1.0!