如何为我的开发环境存储与生产共享的机密S3信息？

Question

My dev bucket uses the same credentials as my production bucket.

Since I am using Heroku, I have moved all these credentials into my Heroku Config. Which would work except for my development env since its on my local.

How can I store this information securely so that this data is not being seen on a public repo but is still accessible and instantiated to my local machine?

Answer 1

Rails 4.1 can do this internally, but until then you might find these helpful:

• https://github.com/bkeepers/dotenv
• https://github.com/jcamenisch/ENV_BANG/

For info on 4.1, see the 'secrets.yml' section.

http://edgeguides.rubyonrails.org/4_1_release_notes.html

update: Appears I was mistaken about Rails 4.1. While it has a secrets.yml file it's not encrypted. Wonder where I read that it was...