Rails 5.2 introduces the encrypted secrets feature through the usage of the awesome credentials.yml
. But I'm struggling to get it to work with Heroku.
Is there any Strategy available right now to deploy a Rails 5.2 App to Heroku?
You should set the environment variable RAILS_MASTER_KEY
, either on your heroku web dashboard, or using console:
$ heroku config:set RAILS_MASTER_KEY=<your-master-key>
Example:
$ heroku config:set RAILS_MASTER_KEY=123456789
(The <
and >
are placeholders)
Rails will detect this variable and use it as your master key (instead of looking for it in master.key file).
rails secret
to generate a new secret key. Is there a way to generate a new master key?
bundle exec rails runner "puts ActiveSupport::EncryptedConfiguration.generate_key"
. Just consider that you won't be able to decrypt any file encrypted with a previous key.
master.key
I have locally as I do in production then? What if I don't want local developers being able to encrypt my production secrets?
You could also use the following command to create Heroku RAILS_MASTER_KEY
with the contents of your local config/master.key
:
heroku config:set RAILS_MASTER_KEY="$(< config/master.key)"
Note: make sure you are in the directory that contains your Rails app.