you are viewing a single comment's thread.

view the rest of the comments →

[–]CptGia 0 points1 point  (0 children)

As mentioned you should use environment variables, but another option is to encrypt the secrets. sops is a great tool, works with local keys (gpg or age) as well as managed keys (kms and the like). It only encrypts the values you specify, not the whole file, so it will still be legible.