Hi Abhirav. I think this is an interesting project. It would be nice if we had a story for handling sensitive values that went (in principle) from "use environment variables" (or a file) to the various Vault-like options. The trick is making that compelling as a feature for Django, but such a thing could begin as a separate package.
I was casually keeping a list of projects in the "environment variable" space, pasted below. If you want to take a look at those, rob the best ideas, and think about the simplest API for that (beyond bootstrapping, in the settings it's just `get()` I guess...) I'm very happy to discuss it with you in the forum. I think a good first goal would be a write up (blog post?) on the state of play. Kind Regards, Carlton Options for keeping secrets in the environment. https://github.com/theskumar/python-dotenv Jeff likes Direnv https://direnv.net vs https://github.com/jezdez/envdir https://github.com/alecthomas/ondir https://github.com/sloria/environs https://github.com/joke2k/django-environ Hayek's one. https://github.com/hynek/environ-config LinconLoop's one. https://github.com/lincolnloop/easyconf https://github.com/lincolnloop/goodconf Keep it in the repo? https://git-secret.io https://docs.ansible.com/ansible/latest/user_guide/vault.html https://oteemo.com/2019/06/20/hashicorp-vault-is-overhyped-and-mozilla-sops-with-kms-and-git-is-massively-underrated/ -- You received this message because you are subscribed to the Google Groups "Django developers (Contributions to Django itself)" group. To unsubscribe from this group and stop receiving emails from it, send an email to django-developers+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/django-developers/b29815be-dd3d-4e13-b4f6-d1a926d563e7%40googlegroups.com.
