Rails 3 email password in environment.rb? Is clicking git safe?

Question

I am sure that I should not publish my email password in the public git repository in the environment.rb file. Is there a way to avoid this by not including the entire file in .gitignore?

Answer 1

You can save your email credentials in another config / email.credentials.yml file:

host: ... username: ... password: ... ... 

and in the environment.rb file just load them (for example):

 YAML.load_file("#{Rails.root}/config/email.credentials.yml")['username'] 

then you should mention the credential file in the .gitignore file.

In addition, if you deploy the application on multiple servers, you can check if the file exists in the initializer and otherwise cause an error. This way you will make sure that the application does not start if there is no mail configuration file.

Answer 2

I also discovered another way that could be simpler:

configurations / Initializers / setup_mail.rb. There are the following applications (for example) for gmail:

 ActionMailer::Base.smtp_settings = { :enable_starttls_auto => true, :address => 'smtp.gmail.com', :port => 587, :domain => 'domain.name', :authentication => :plain, :user_name => ' [e-mail] ', :password => 'secret' } 

Then just add the .gitignore file. This way you only edit 2 (not 3) files.

Answer 3

Here is what I use:

 instance_eval File.read "#{ Rails.root }/config/confidential.rb" 

and secret.rb is a file, for example:

 config.pass1 = '1234' config.pass2 = '54r235'