Are Enviornment Variables Still Considered a Secure Choice for Production?
I am hosting my Django website, and I am very concerned about security measures and implementations. However, I feel like system environment variables saved in servers (in my example I am using Koyeb) or files have a security issue with them. Is this the case? If so, what are some very low cost, low maintenance (I had trouble with Google Secret Manager before), methods to keep my secrets secure and safe?
I would suggest to avoid them by all means. And this is not “still”. It was a bad idea in the first place.
Some may disagree, but I doubt they have convincing arguments. Generally, an application should be functionally independent from the environment as much as possible. Not only from the environment variables, but from all the environment details.