EmbeddingGemma 2: an open, lightweight multimodal embedding model
deepmind.google·6d ago
AI Engineering
Lobsters·Jul 31·5 min read
Where .env Went Wrong
TL;DR
Environment variables are effective for delivering strings to processes, but .env files have mistakenly become a source of truth, complicating configuration management.
✦ Why It Matters
Consider revising your configuration management strategy to avoid over-reliance on .env files.
Key Takeaways
- Avoid using .env files for sensitive information.
- Implement SecretSpec for better secret management.
- Document application requirements separately from environment variables.
- Transition gradually to new secret management practices.
How It Works
SecretSpec allows developers to declare application requirements in a committed file without including sensitive values. It supports gradual migration from .env files by copying names while keeping values secure in a keyring or password manager.