secure API keys in a .Net core Web app hosted on linux server
I've currently got a .Net Web application that I'm hosting on a Linux server. It's also using multiple API keys, which I'm currently using inside the project, how can I secure these API keys inside of Linux so they're not attached to the project files?
4 Replies
https://learn.microsoft.com/en-us/aspnet/core/security/app-secrets?view=aspnetcore-6.0&tabs=windows
Would this still apply? As I believe it's OS dependant
Safe storage of app secrets in development in ASP.NET Core
Learn how to store and retrieve sensitive information during the development of an ASP.NET Core app.
OK, I'll give environment variables a go! Cheers 🙂
User secrets only apply during development
Yeah I've realised now, I think the most secure method I could use atm is azure keyvault or something