Question

I’m using GAE to run my app. My application uses a password to connect an external service.
Currently I store this password in a free-text property file which is part of the sources.
Cause I share my sources in git-hub my passwords are exposed

IS there a way to store this kind of sensitive information in GAE configuration / environment (using the admin portal) or something like that.
I guess I can store it somehow in the DataStore, but I’m looking for something simpler like heroku ENV solution

Answer 1

Keep a separate, .gitignore‘d, unversioned file that has your passwords in it (say “private.py”). Then, add an example version of this file with placeholder values to your versioned source (say, “private.py.sample”).