Skip to main content

Secrets & environments

Defining secrets​

We use Doppler to synchronize secrets across our dev and production environments.

To add a secret follow this procedure:

  • Log in to Doppler using your brimstone.com account.
  • Go into the dagster project, currently used for defining secrets all projects in monolith.
    • Note: we will separate secrets by project at some point in the future.
  • Add your secret to the dev and prd environments.
    • You can specify the same or different values between both, depending on the isolation level you want or can achieve.
    • For example, PGURL is different between dev and prd.
  • Add your secret to shared.env as MY_SECRET = env.require("MY_SECRET").
  • Import the secret with from shared.env import MY_SECRET wherever you need to use it.