#85 YAML Configuration (revised)

Oct 14, 2012 | 8 minutes | Tools

Keeping passwords and secret tokens in source control is a security risk. Here I show how to move these settings out into a YAML configuration file which can be loaded in as a hash or environment variables.

Click to Play Video ▶

Download:
source codeProject Files in Zip (59.4 KB)
mp4Full Size H.264 Video (23.4 MB)
m4vSmaller H.264 Video (11.7 MB)
webmFull Size VP8 Video (12.6 MB)
ogvFull Size Theora Video (30.2 MB)

Browse Source Code

Resources

Figaro

          terminal
        
echo /config/application.yml >> .gitignore
cp config/application.yml config/application.example.yml

          articles_controller.rb
        
http_basic_authenticate_with name: CONFIG[:username], password: CONFIG[:password]

          config/initializers/secret_token.rb
        
Blog::Application.config.secret_token = CONFIG[:secret_token]

          config/application.yml
        
username: "admin"
password: "secret"
secret_token: "024e1460..."
development:
  host: "localhost:3000"
test:
  host: "test.local"
production:
  host: "blog.example.com"

          config/application.rb
        
CONFIG = YAML.load(File.read(File.expand_path('../application.yml', __FILE__)))
CONFIG.merge! CONFIG.fetch(Rails.env, {})
CONFIG.symbolize_keys!

# ...

config.action_mailer.default_url_options = {host: CONFIG[:host]}

ENV Alternative

          config/application.rb
        
config = YAML.load(File.read(File.expand_path('../application.yml', __FILE__)))
config.merge! config.fetch(Rails.env, {})
config.each do |key, value|
  ENV[key] = value unless value.kind_of? Hash
end