Hacker News Reader

The way I do it is to set the `EnvironmentFile` entry in the service definition.

I'd guess that the author's idea is that if someone gains access to the server, the secrets would be either dumped from the binary or the environment file, if so, why to bother with another file?

Do you use LightSail or is it just regular AWS?

I’ve never used LightSail but it looks like a good deal.

Nope - in fact right now I'm not running much at all; just some static hosting with S3 and CloudFront which costs pennies a month. For a blog that's pretty much write-only and that not very often.

When I'm playing with more complex stuff I spin up an ECS with Fargate hosted containers. That's mostly for fun though.

Cloudformation gang represent