Stop Putting Secrets in Environment Variables: Practical systemd-creds on Linux

Passwords in Environment= lines, API tokens in world-readable unit drop-ins, and EnvironmentFile=/etc/myapp.env that every process on the host can cat once it gets a shell — that pattern still shows up in homelab and production units alike. systemd has a better primitive: credentials. They are limited-size binary or text blobs that the service... Weiterlesen