Eoin Kelly

It turns out that Rails already uses the `app:` namespace for two tasks ```bash # App tasks (useful in local development and deployed environments) rails app:template # Applies the template...

Our solution here looks quite different depending on whether we want to store these audit logs in the DB or as actual logs files. I have implemented the log file...

Rails custom config docs: https://guides.rubyonrails.org/configuring.html#custom-configuration

We noted in our discussion that it is a bit unfortunate that the file is called "secrets". It's really a single place to load configuration for the app. Some of...

Just noting here that [Rails 7+ encrypted attributes API](https://guides.rubyonrails.org/active_record_encryption.html) (which we are planning to use for the 2FA feature) will require the use of Rails encrypted credentials so we will...

We discussed: * We still want to load all our config and secret values in the environment * There is no meaningful difference in how "secret" and "non-secret" values from...

The [Rails docs for Rails.application.secret_key_base](https://api.rubyonrails.org/classes/Rails/Application.html#method-i-secret_key_base) detail the order of priority that these secrets are considered: > The [secret_key_base](https://api.rubyonrails.org/classes/Rails/Application.html#method-i-secret_key_base) is used as the input secret to the application's key generator, which...

Noting a few things I have learned while reading up on this: ### Rails can load the master key from ENV If `RAILS_MASTER_KEY` exists in the env then it is...

It sounds like including the lib is the easy bit and there are a few steps you need after that to get to a good solution. Would this be better...

Discussion outcome: * We decided that this should be a wiki page