Unfloyded/Legamunt
0
0
Fork 0
Code Activity

Use SECRET_KEY_BASE_DUMMY feature as placeholder during asset compilation (#30505)

Browse source
This commit is contained in:
Matt Jankowski 2024-06-10 16:08:04 -04:00 • committed by GitHub
parent 9cc4040308
commit 0e1110c947
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
4 changed files with 12 additions and 11 deletions
Download patch file Download diff file Expand all files Collapse all files

6
config/environments/production.rb
View file

@ -156,7 +156,11 @@ Rails.application.configure do
}
# TODO: Remove once devise-two-factor data migration complete
config.x.otp_secret = ENV.fetch('OTP_SECRET')
config.x.otp_secret = if ENV['SECRET_KEY_BASE_DUMMY']
SecureRandom.hex(64)
else
ENV.fetch('OTP_SECRET')
end
# Enable DNS rebinding protection and other `Host` header attacks.
# config.hosts = [