Hacker News Reader

I follow the 12 factor app methodology (https://12factor.net/), everything in ENV.

Advantage of this approach is it encrypts the values individually instead of per file. This way the secrets files are git/review friendly.

Dotenv and Ansible vault, depending on the project. I also want to look into Hashicorp's Vault https://www.vaultproject.io

ENV variables. I use `dotenv` in Ruby projects.

And it actually uses GPG : )

Yep, same here. I prefer git-crypt, but we use Ansible vault too.

.env or ENV with AWS KMS