Comment on Reminder: secret_token.rb is named so for a reasonComments−bgentry13yAs hgimenez said, the best way is to not store your secrets in your source tree at all (12factor.net style). Keep them in the environment. Here's a great example:https://github.com/democrats/voter-registration/commit/2fa87...−nodata13yIs that a good example? It doesn't warn if the env isn't set.−bgentry13yNo, it doesn't warn, it raises an error and prevents the application from booting: https://github.com/democrats/voter-registration/commit/2fa87...
Comments
As hgimenez said, the best way is to not store your secrets in your source tree at all (12factor.net style). Keep them in the environment. Here's a great example:
https://github.com/democrats/voter-registration/commit/2fa87...
Is that a good example? It doesn't warn if the env isn't set.
No, it doesn't warn, it raises an error and prevents the application from booting: https://github.com/democrats/voter-registration/commit/2fa87...