通过FTP部署nodejs时如何隐藏我的密码

Question

How to hide my password when deploying nodejs through FTP? It seems the following code will be seen by everyone in GitHub repository. Also, when people download my file, they can also see the password. How to avoid this problem? Thank you very much!

const Client = require('ftp');
const connectionProperties = {
      host: 'ftp.example.com',
      user: '',
      password: '12345678'

Answer 1

Use dotenv to retreive all environment variables from .env file.

Installation

npm install dotenv

In your .env file.

HOST=ftp.example.com
PASSWORD=12345678

In your script file

const dotenv = require('dotenv')
dotenv.config()

const Client = require('ftp');
const connectionProperties = {
      host: process.env.HOST,
      user: '',
      password: process.env.PASSWORD

Please note that you should edit .gitignore file ignore .env file from the git source control.