test/dummy/config/secrets.yml in killbill-avatax-0.1.0 vs test/dummy/config/secrets.yml in killbill-avatax-0.2.0
- old
+ new
@@ -3,20 +3,30 @@
# Your secret key is used for verifying the integrity of signed cookies.
# If you change this key, all old signed cookies will become invalid!
# Make sure the secret is at least 30 characters and all random,
# no regular words or you'll be exposed to dictionary attacks.
-# You can use `rake secret` to generate a secure secret key.
+# You can use `rails secret` to generate a secure secret key.
# Make sure the secrets in this file are kept private
# if you're sharing your code publicly.
+# Shared secrets are available across all environments.
+
+# shared:
+# api_key: a1B2c3D4e5F6
+
+# Environmental secrets are only available for that specific environment.
+
development:
- secret_key_base: 8ccbf616967018087a9cb2f1b4c2b4743e1325e9919037d961caa253f15e64752ca390b1ed029c6f2c493bb86d18929c38553d452a51379935fc98e59da0eba2
+ secret_key_base: efd24106d6296f2ae8fb35e4a8652b560633e1e491cf7307eb0f6994956dc1fde08ef59f73fcfb73a9ec5504fe1ce521a320aa75b7c8d93e10532e0e5a44cd1d
test:
- secret_key_base: 7cef8be3acaa03d7b323cdd703f4fc31ec659597aee08a0974601e3777832ff61b9866bbe6143efc43e7dfafb3c0f1ec24503ecceb77704712c244acbcaaa410
+ secret_key_base: 1b6e377331b277dcee3218dcc37913cc5c81193f285ef99f9f1bfc642471d5eb6aad4d792b6a2b5211c36fba55fd077cd1081d27ab32204f65b4172ba781afb8
-# Do not keep production secrets in the repository,
-# instead read values from the environment.
+# Do not keep production secrets in the unencrypted secrets file.
+# Instead, either read values from the environment.
+# Or, use `bin/rails secrets:setup` to configure encrypted secrets
+# and move the `production:` environment over there.
+
production:
secret_key_base: <%= ENV["SECRET_KEY_BASE"] %>