Adding sensitive data to heroku application (ruby on rails)

Question

I am trying to set up a mailer with my heroku application. I fear if I push up my production.rb, my gmail password will be exposed. How can I prevent this?

Production.rb:
  ActionMailer::Base.smtp_settings = {
    :address        => "smtp.gmail.com",
    :port           => 587,
    :authentication => :plain,
    :user_name      => "[email protected]",
    :password       => "**********"
  }

Use environment variables. :password => ENV['Your_password'] — Pavan
– Pavan, Commented Aug 6, 2015 at 17:15
possible duplicate of Where to store sensitive data in public rails app? — Brad Werth
– Brad Werth, Commented Aug 6, 2015 at 17:32

Ian Selby · Accepted Answer · 2015-08-06 17:17:18Z

2

You can use environment variables: https://devcenter.heroku.com/articles/config-vars

It's a best-practice to never include sensitive information in your repo. Env variables are also a good way to go, because they'll work with whatever provider you use, so if you move from Heroku to another platform, you won't need to make any changes to your code.

answered Aug 6, 2015 at 17:17

Ian Selby

3,2411 gold badge27 silver badges18 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

David Aldridge Over a year ago

... and look into the various available gems that allow you to reference ENV variables from within your app on development environments without setting them on your dev system also.

Steez Over a year ago

Thank you. Thats was very helpful and works perfectly!!

Collectives™ on Stack Overflow

Adding sensitive data to heroku application (ruby on rails)

1 Answer 1

2 Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

2 Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related