[Nix-dev] Re: [Nix-commits] SVN commit: nix - r25055 - in

[7c6f434c at mail.ru]

>>> -    mysqlPassword = "admin";
>>> +    mysqlPassword = builtins.readFile ../configurations/mysqlpw;
>> 
>> doing so will still make the password appear in the nix store?
>
>Yes, and that's a fairly annoying problem to which I don't have a very good
>solution (except, indeed, substituting the password at runtime).

Well, you can store encrypted password in store and decrypt it in run time - that way you only need
to guard one decryption key file if you need to store multiple passwords.