# StoringSecrets

There are many heavy weight solutions that you should look into if you become a team with many credentials including blackbox, [https://www.chef.io/](https://www.chef.io/), [https://square.github.io/keywhiz/](https://square.github.io/keywhiz/). Can also have files encrypted on github with things like git-crypt

## Simple Solutions

### Environment Variables

* easy load from file
* often use env variables for other things too so good to set up

Cons:

* According to [https://news.ycombinator.com/item?id=9952911](https://news.ycombinator.com/item?id=9952911), its possible that environment variables are shown in debug output when a server crashes potentially comprising the system
* Can't revoke secrets.json or manage like an expert

### Seperate Secrets.json

* Easiest&#x20;
