diff --git a/.gitignore b/.gitignore index 20572e75..74dee259 100644 --- a/.gitignore +++ b/.gitignore @@ -18,6 +18,7 @@ .DS_Store # Ignore application configuration +/config/credentials/production.key /config/application.yml /config/database.yml diff --git a/config/credentials/production.yml.enc b/config/credentials/production.yml.enc new file mode 100644 index 00000000..fed79494 --- /dev/null +++ b/config/credentials/production.yml.enc @@ -0,0 +1 @@ +UkA00Eie7fXg8oiwhk4r3b1iEbMSAiekgZGszpEW4gPQ9EhV9s6OFxbZ37ri6GVfXMi9uwmSJbGkcGFoABmfUOYpIt+sbI+QzHIdWQ64cvHqVZR3bMwW+NAM2Qsg448UpGdKUzIUEi9TcrUJ5BKa7zljif7uBRywcZlSIxX0bYEYW1O8grxPCHamBMxM+RtDnO+LQVXLSFxa--rAIn70Sae683U31i--I1n2jdz7J+5rb1PsDF/W9Q== \ No newline at end of file diff --git a/config/deploy.rb b/config/deploy.rb index 9028188c..02cf5305 100644 --- a/config/deploy.rb +++ b/config/deploy.rb @@ -11,7 +11,8 @@ append :linked_files, 'config/application.yml', - 'config/database.yml' + 'config/database.yml', + 'config/credentials/production.key' append :linked_dirs, '.bundle', 'log', 'node_modules' diff --git a/config/deploy/production.rb b/config/deploy/production.rb index ec8cf47e..e96e4db7 100644 --- a/config/deploy/production.rb +++ b/config/deploy/production.rb @@ -3,4 +3,3 @@ ssh_options: { forward_agent: false } set :bundle_env_variables, { 'NOKOGIRI_USE_SYSTEM_LIBRARIES' => 1 } -set :default_env, { 'SECRET_KEY_BASE' => 'NOT_A_REAL_SECRET_AND_THATS_OK' } diff --git a/config/secrets.yml b/config/secrets.yml deleted file mode 100644 index a9e556dd..00000000 --- a/config/secrets.yml +++ /dev/null @@ -1,22 +0,0 @@ -# Be sure to restart your server when you modify this file. - -# Your secret key is used for verifying the integrity of signed cookies. -# If you change this key, all old signed cookies will become invalid! - -# Make sure the secret is at least 30 characters and all random, -# no regular words or you'll be exposed to dictionary attacks. -# You can use `rake secret` to generate a secure secret key. - -# Make sure the secrets in this file are kept private -# if you're sharing your code publicly. - -development: - secret_key_base: 933798de41b016682c5cf5b5614ab424bd09e15fdcc6da79dff483c1f8e81d003fd1fe9df3e9f41eeb8a58fbf35841fc2b1a6631171979a4457d56d1c2f9a6a3 - -test: - secret_key_base: 8b8160ce20ca97f62798aefd420e2ab6468c380832864ecf57803b6448cafde5e338d2c1c436f25299a6256ffb7d8986f9c1a2f12317650e716018c8867dac8e - -# Do not keep production secrets in the repository, -# instead read values from the environment. -production: - secret_key_base: <%= ENV["SECRET_KEY_BASE"] %>