hey, have anyone tried using doppler to pass in se...
# general
h
hey, have anyone tried using doppler to pass in secrets for e.g. Kratos? I could load in
kratos.yaml
with values from the config file and tdhat can be used to get out with e.g. docker. i'm trying to version control my setup + simulate prod deployment on a new VPS i've bought. like a lot other people, i don't like having passwords / secrets stored in a config file in git 😂
q
I'm using Terraform to create a random password and generate the config file like that. It's not really an answer to your question but it might give some inspiration for another solution
h
ya, i could do the same with saltstack. but it's not the solution i'm looking for on single VPS/VM.
could ofc also just run the commands i have and see what happens heh.
h
That is what I want to achieve with doppler
they can import yaml config into doppler and generate variables from it.
@steep-lamp-91158 so
serve
does require
-c
to even start. will env variables overwrite the config options? so in my
-c config.yaml
i could basically just have
CHANGE ME
listed as value in the file.
i have imported my whole kratos config file into doppler it has converted it into proper naming for ENV vars. but i can't figure out what my config file should be like.
s
yes env vars override the config file
I guess the config file can be just empty or hold some dummy values
h
I tried an empty yaml file, it complained about missing fields. Then I took the full reference config from the docs. That complained as well.
And it got kinda late and I got irritated so I went to bed. I might try again today. So any suggestions will be nice
s
I'm pretty sure that we first load all values from the file and env, merge, and then validate regardless, you should be able to get a minimal working config file from the quickstart
h
Oka will try the quick start