Github: python-decouple
Em dom, 22 de abr de 2018 14:05, Bill Torcaso
escreveu:
>
> I waited a while to answer this, and my answer comes in three distinct
> parts.
>
> #-
>
> Question: what is the danger is using environment variables to hold
> secret info?
>
> Answer: The
I waited a while to answer this, and my answer comes in three distinct
parts.
#-
Question: what is the danger is using environment variables to hold secret
info?
Answer: The Django runtime will dump secret info from environment
variables into an HTTP response, in some c
On 3/04/2018 8:49 AM, Mike Dewhirst wrote:
On 2/04/2018 7:59 PM, Cictani wrote:
Hi,
You could rename your dev settings file to for example
'settings_dev.py' and only commit this file (add settings.py to
.gitignore).
I wrote a tiny utility to read a file and retrieve credentials for any
pur
On 2/04/2018 7:59 PM, Cictani wrote:
Hi,
You could rename your dev settings file to for example
'settings_dev.py' and only commit this file (add settings.py to
.gitignore).
I wrote a tiny utility to read a file and retrieve credentials for any
purpose but especially for keeping database cre
Hi,
You could rename your dev settings file to for example 'settings_dev.py'
and only commit this file (add settings.py to .gitignore).
On your Linux Server you could create a new directory in /etc
like:
/etc/django
/etc/django/app1
/etc/django/app2
...
There you store your production 'setti
et.
Eric
From: django-users@googlegroups.com on behalf
of Derek
Sent: Saturday, March 31, 2018 3:46:53 PM
To: Django users
Subject: Re: Decoupling Postgres database credentials in django for deployment.
How is github "security" going to help you keep you
How is github "security" going to help you keep your passwords safe and why
is this better than ENV variables (which most of use without any problems).?
On Friday, 30 March 2018 16:50:03 UTC+2, Bill Torcaso wrote:
>
>
> I have a concern about using environment variables to hold secret
> informat
> Eric
>>
>> --
>> *From:* django-users@googlegroups.com on
>> behalf of Bill Torcaso
>> *Sent:* Friday, March 30, 2018 4:50:02 PM
>> *To:* Django users
>> *Subject:* Re: Decoupling Postgres database credentials in django fo
ost name or some other properties of the target systems.
>
>
> Best
>
>
> Eric
>
> --
> *From:* django-users@googlegroups.com on
> behalf of Bill Torcaso
> *Sent:* Friday, March 30, 2018 4:50:02 PM
> *To:* Django users
> *Su
based on
the host name or some other properties of the target systems.
Best
Eric
From: django-users@googlegroups.com on behalf
of Bill Torcaso
Sent: Friday, March 30, 2018 4:50:02 PM
To: Django users
Subject: Re: Decoupling Postgres database creden
I have a concern about using environment variables to hold secret
information, and an opinion about it.
IF
DEBUG is enabled, and there is a 500 server internal error, and the default
500 template is used to render the response,
THEN
*all of your secret information is shown in the browser
_
From: django-users@googlegroups.com on behalf
of Antonis Christofides
Sent: Friday, March 30, 2018 2:11:02 PM
To: django-users@googlegroups.com
Subject: Re: Decoupling Postgres database credentials in django for deployment.
Environment variables are the best option for not embedding
replicas and services which need them.
>
>
> Best regards
>
>
> Eric
>
>
> *From:* django-users@googlegroups.com on
> behalf of Andréas Kühne
> *Sent:* Friday, March 30, 2018 11:08:52 AM
> *To:* django-users@googlegr
rds
Eric
From: django-users@googlegroups.com on behalf
of Andréas Kühne
Sent: Friday, March 30, 2018 11:08:52 AM
To: django-users@googlegroups.com
Subject: Re: Decoupling Postgres database credentials in django for deployment.
Hi,
I am sorry, but this doesn't really make sen
Hi,
I am sorry, but this doesn't really make sense. What do you mean by
decoupling the data?
Deploying to the cloud, will mean that you will need to setup a new
database for your project - there you will get a completly new database,
that won't be connected to your development data in any way.
Y
Hi,
I have made a django project and want to deploy it on cloud.
Before that i want to decouple all the private information.
I want to decouple the database info too, like the username password etc.
Any help is appreciated.
--
You received this message because you are subscribed to the Google Gro
16 matches
Mail list logo