the sensitive configuration must be able to be passed as an environment variable
With continuous integration and continuous deployment, configuration is more and more deployed automatically and hence should be managed somewhere.
Standard configuration could be stored in a git repository which is often public (especially for opensource software), but sensitive informations should be kept secret.
Is the following secret part of this second category, a sensitive information?
# random string used to encrypt cookies
# mandatory
secrets => ['fdjsofjoihrei'],
If this is true, is there a way to pass this value as an environment variable instead of a configuration file?