deployment - What to use in Production environment instead of UserSecrets -
i have console app in dotnet core. use appsettings.development.josn , appsettings.staging.json dev , staging environment production environment use usersecrets. have 2 problem when app running on production env not create usersecrets in %appdata%/microsoft have make manually , starts work.
another part of question this: today found out microsoft wrote here
the secret manager tool used in development. can safeguard azure test , production secrets microsoft azure key vault configuration provider. see azure key vault configuration provider more information.
i dont have azure. can use in production if not supposed use usersecrets.
while environment variables 1 of used options in web development , the twelve factor app documents states: "store config in environment" there reasons why may not best approach:
the environment implicitly available process , it's hard track access. result, example, may face situation when error report contain secrets
the whole environment passed down child processes (if not explicitly filtered). secret keys implicitly made available 3rd-party tools may used.
all 1 of reasons why products vault become popular nowadays.
so, yes, may use environment variables, aware)
Comments
Post a Comment