[Catalyst] Where best to store database connection information?

[Hugh Barnard]

Hi Adam

The specific difficulty you mentioned can be solved by
https://help.github.com/articles/ignoring-files/ this is pretty a necessity
for github otherwise, sooner or later, one forgets.

Best regards Hugh

On 16 February 2015 at 17:24, Adam Witney <awitney at sgul.ac.uk> wrote:

>
> Hi,
>
> Thanks for your replies.
>
> I guess my question was more about any security issue of having the
> database username/password stored in a text file.  And what do people
> consider best practice for this from a security point of view?
>
> Thanks
>
> Adam
>
>
> > -----Original Message-----
> > From: Octavian Rasnita [mailto:orasnita at gmail.com]
> > Sent: 16. februára 2015 17:10
> > To: The elegant MVC web framework
> > Subject: Re: [Catalyst] Where best to store database connection
> > information?
> >
> > Catalyst uses Config::General to read .conf files. If Config::General is
> > configured with the option -UseApacheInclude, then you can use an apache
> > "include file.conf" in the .conf file to include another file from
> another
> > directory which is not saved by git.
> >
> > Or the option -IncludeDirectories can be also useful so all the files
> from the
> > given directory will be included.
> >
> > --Octavian
> >
> > ----- Original Message -----
> > From: "David Schmidt" <davewood at gmx.at>
> > To: "The elegant MVC web framework" <catalyst at lists.scsys.co.uk>
> > Sent: Monday, February 16, 2015 6:22 PM
> > Subject: Re: [Catalyst] Where best to store database connection
> > information?
> >
> >
> > > the catalyst configloader can load more then just one file.
> > >
> > > by default it loads "myapp.conf"
> > >
> > > if a file named "myapp_local.conf" exists it is loaded aswell.
> > >
> > > docs:
> > > https://metacpan.org/pod/distribution/Catalyst-Plugin-
> > ConfigLoader/lib/Catalyst/Plugin/ConfigLoader/Manual.pod#Using-a-local-
> > configuration-file
> > >
> > > On 16 February 2015 at 15:42, Adam Witney <awitney at sgul.ac.uk> wrote:
> > >> Hi,
> > >>
> > >> I have a Catalyst / DBIx::Class application and I have been storing
> the
> > >> database connection parameters in a config file which is sourced using
> > >> MYAPP_CONFIG_LOCAL_SUFFIX. But this seems a bit of a security
> > problem
> > >> having the main password in a text file like this, especially if it
> goes
> > >> into git.
> > >>
> > >> Is there a recommended or best practice place to store database
> > >> connection information?
> > >>
> > >> Thanks for any help
> > >>
> > >> Adam
> > >>
> > >> _______________________________________________
> > >> List: Catalyst at lists.scsys.co.uk
> > >> Listinfo: http://lists.scsys.co.uk/cgi-bin/mailman/listinfo/catalyst
> > >> Searchable archive:
> > >> http://www.mail-archive.com/catalyst@lists.scsys.co.uk/
> > >> Dev site: http://dev.catalyst.perl.org/
> > >
> > > _______________________________________________
> > > List: Catalyst at lists.scsys.co.uk
> > > Listinfo: http://lists.scsys.co.uk/cgi-bin/mailman/listinfo/catalyst
> > > Searchable archive:
> > > http://www.mail-archive.com/catalyst@lists.scsys.co.uk/
> > > Dev site: http://dev.catalyst.perl.org/
> >
> >
> > _______________________________________________
> > List: Catalyst at lists.scsys.co.uk
> > Listinfo: http://lists.scsys.co.uk/cgi-bin/mailman/listinfo/catalyst
> > Searchable archive:
> http://www.mail-archive.com/catalyst@lists.scsys.co.uk/
> > Dev site: http://dev.catalyst.perl.org/
>
> _______________________________________________
> List: Catalyst at lists.scsys.co.uk
> Listinfo: http://lists.scsys.co.uk/cgi-bin/mailman/listinfo/catalyst
> Searchable archive:
> http://www.mail-archive.com/catalyst@lists.scsys.co.uk/
> Dev site: http://dev.catalyst.perl.org/
>



-- 
http://www.hughbarnard.org
http://www.twitter.com/hughbarnard
http://www.big-wave-heuristics.com/
<http://www.hackney-environment-network.org.uk/>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.scsys.co.uk/pipermail/catalyst/attachments/20150216/d3510ed2/attachment.htm>