Adam Witney wrote:
I guess my question was more about any security issue of having the database 
username/password stored in a text file.  And what do people consider best 
practice for this from a security point of view?

One mechanism that may help is to move the DB connection data out -
a way to do this is https://metacpan.org/pod/DBIx::Class::Schema::Config

Which moves the problem around...

I tend to have dev info with configs referring to sqlite - no passwords.
Deployed versions have configs built up from templates in ansible,
credentials either gitcrypt-ed or ansible vaulted.

        Nigel.

--
[ Nigel Metheringham ------------------------------ ni...@dotdot.it ]
[                 Ellipsis Intangible Technologies                  ]

_______________________________________________
List: Catalyst@lists.scsys.co.uk
Listinfo: http://lists.scsys.co.uk/cgi-bin/mailman/listinfo/catalyst
Searchable archive: http://www.mail-archive.com/catalyst@lists.scsys.co.uk/
Dev site: http://dev.catalyst.perl.org/

Reply via email to