Skip to content

Comment on Developer posts secret key on GitHub, loses $40K in 2 minutesparent

Comments

Generally you deploy or use some sort of secret/config delivery service.

For example most/all VPS provider allow you to give extra data to the machine; this could be the secrets directly or maybe a connection url to a local* redis server with the configs.

Or you can copy paste a file vis ssh.

*AWS-like providers allow you to also deploy private networks so that only approved services vps can access a db

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.