Enabling secure cred storage using ~/.ec2/rubber-secret.yml

dliggat · dliggat · commit b1f0d94aba4d · 2014-12-13T15:46:18.000-08:00
diff --git a/config/rubber/rubber.yml b/config/rubber/rubber.yml
@@ -28,7 +28,7 @@ domain: bloggy.com
 # OPTIONAL: Additional rubber file to pull config from if it exists.  This file will
 # also be pushed to remote host at Rubber.root/config/rubber/rubber-secret.yml
 #
-# rubber_secret: "#{File.expand_path('~') + '/.ec2' + (Rubber.env == 'production' ? '' : '_dev') + '/rubber-secret.yml' rescue 'rubber-secret.yml'}"
+rubber_secret: "#{File.expand_path('~') + '/.ec2' + (Rubber.env == 'production' ? '' : '_dev') + '/rubber-secret.yml' rescue 'rubber-secret.yml'}"
 
 # OPTIONAL: Encryption key that was used to obfuscate the contents of rubber-secret.yml with "rubber util:obfuscation"
 # Not that much better when stored in here, but you could use a ruby snippet in here to fetch it from a key server or something

Original file line number	Diff line number	Diff line change
`@@ -28,7 +28,7 @@ domain: bloggy.com`
`28`	`28`	`# OPTIONAL: Additional rubber file to pull config from if it exists. This file will`
`29`	`29`	`# also be pushed to remote host at Rubber.root/config/rubber/rubber-secret.yml`
`30`	`30`	`#`
`31`		`-# rubber_secret: "#{File.expand_path('~') + '/.ec2' + (Rubber.env == 'production' ? '' : '_dev') + '/rubber-secret.yml' rescue 'rubber-secret.yml'}"`
	`31`	`+rubber_secret: "#{File.expand_path('~') + '/.ec2' + (Rubber.env == 'production' ? '' : '_dev') + '/rubber-secret.yml' rescue 'rubber-secret.yml'}"`
`32`	`32`
`33`	`33`	`# OPTIONAL: Encryption key that was used to obfuscate the contents of rubber-secret.yml with "rubber util:obfuscation"`
`34`	`34`	`# Not that much better when stored in here, but you could use a ruby snippet in here to fetch it from a key server or something`