This document recommends stopping the use of environment variables for configuration due to maintenance issues and lack of security. It promotes using Hashicorp Consul and Vault for key-value storage, service discovery, secrets management and certificates. Links and resources are provided for Consul, Vault and related Ruby gems for integrating the services.

1. Stop using ENV
variables
Everything is based on real events and pain

2. Pain with ENV
● Hard to maintain
● Pain with debug
● Pain with unicode
● Not secure

3. A typical production

4. Hashicorp Consul
● key/value storage
● service discovery
● healthcheck
● watcher
● build in UI
● acl
● tls

5. Hashicorp consul and Diplomat gem

6. Hashicorp Vault
● secret storage
● multiple auth provider
● ACL
● multiple backend
● Certificate authority

7. Hashicorp vault and vault gem

8. Links
● https://www.consul.io/
● https://www.vaultproject.io/
● https://github.com/WeAreFarmGeek/diplomat
● https://github.com/hashicorp/vault-ruby

9. Thanks to
listeners