Since it came up in a thread re: Pleroma security, general reminder to dev friends:

NEVER STORE SECRETS IN ENVIRONMENT VARIABLES.

JUST DON'T DO IT.

seriously. don't.

https://forcesunseen.com/blog/stop-storing-secrets-in-environment-variables

https://github.com/forcesunseen/environ