On: Don’t use environment variables for configuration

[hajile]

It's also easier to encrypt a config file and provide the decrypt key externally.

[PeterisP → hajile]

So then the real secret is the key, which is provided "externally" ... how? Through command line parameters, some other config file, or environment variables? :P

[IMTDb → PeterisP]

Another encrypted config file. Obviously.

[snicker7 → IMTDb]

Encrypted files all the way down.

[Someone → PeterisP]

A file that’s protected appropriately or standard input.