Where to put secure passwords / keys in rails app?

Question

I have several web services that require secure tokens / keys / passwords. Where should I define these safe values ​​for my rails application? I want development keys in version control, but I don't want production keys in version control. How do I set this up? I am new to rails.

Answer 1

You see the question correctly.

Put your passwords and keys in some yml file excluded from version control.

Then, on your production server, create the same file and add a symbolic application to it each time you deploy.

EDIT.

Capistrano is almost ready to meet these needs:

• put your yml files in shared folder

• In the capistrano deploy.rb file:

   after 'deploy' do run "ln -s #{shared_path}/database.yml #{release_path}/config/database.yml" end 

• for working with yml files: http://railscasts.com/episodes/85-yaml-configuration-file

Answer 2

apneadiving is right, a symbolic link to files is a good idea. Another approach is to put the keys in shell variables that are accessible only to the user starting the application. Then in your rails application you will have

 login = ENV['SERVICE_LOGIN'] password = ENV['SERVICE_PASSWORD'] 

Answer 3

In Rails 4.1.0, go to secrets.yml .