undefined | Better HN

0 pointsfalconertc1y ago0 comments

Tools like direnv gets .env files out of repo paths and improves things a lot. You can integrate secrets management in code, but with that there's still no getting away with the assumption that some kind of auth mechanism exists in your env

0 comments

prophesi1y ago

Wouldn't direnv just mean it will now send up your .envrc file? I think what would work even better is combining direnv with pass[0] so that if it does get uploaded, it will be encrypted. ie:

export SECRET_KEY=$(pass work/secret_key)

[0] https://www.passwordstore.org/

j / k navigate · click thread line to collapse

0 pointsfalconertc1y ago0 comments

0 comments

prophesi1y ago

Wouldn't direnv just mean it will now send up your .envrc file? I think what would work even better is combining direnv with pass[0] so that if it does get uploaded, it will be encrypted. ie:

export SECRET_KEY=$(pass work/secret_key)

[0] https://www.passwordstore.org/

j / k navigate · click thread line to collapse