Secrets management

General
1

Hi,
Reading some plugins documentation, They refer to ‘SECRETS’.
I have not found documentation about secrets management for SETTINGS.

Any ideas about how is working?

2

It’s nothing more than a convention. It’s yet another page that may contain a yaml block with key-values much like SETTINGS. If you use git for versioning and backups you can choose to exclude this file.

3

thanks for your reply.

1 Like
4

Is there a way to use env varaible in SETTINGS to externalize secrets and to more secure?

5

No, and I’m not sure that supporting it would help all that much in terms of security. Ultimately, all secrets are going to be sent to the browser anyway. Does materially matter then if they’re also kept on disk?

Answering my own question: perhaps a little, so something worth considering.

1 Like