I've never really been a database guy. I'm using Postgres and in my database.yml, I have:
test:
adapter: postgresql
encoding: unicode
database: blog_test
pool: 5
username: blog
password: <%= ENV['POSTGRES_PASSWORD'] %>
development:
adapter: postgresql
encoding: unicode
database: blog_development
pool: 5
username: blog
password: <%= ENV['POSTGRES_PASSWORD'] %>
production:
adapter: postgresql
encoding: unicode
database: blog_production
pool: 5
username: blog
password: <%= ENV['POSTGRES_PASSWORD'] %>
I'm pushing this to heroku soon and just have a few concerns. Here are my questions (they may be dumb questions but I couldn't find anything on google that addresses this in a simple way):
1. Will heroku set this up for me using my herokue password? Should I just leave this file as is?
2. How can I test that my database is secured by a password?
3. What's the point of even having this file? Am I not the only one that can easily access my Rails files (without hacking ofcourse)?
Thank you in advance. I'm using postgresapp & am deploying on heroku