swelham
I’m putting together a CI script on gitlab for a small app that I have built and I have hit a stumbling block when it comes to creating a release.
The issue is, there isn’t a prod.secret.exs file in my git repo as expected, however I cannot create a release without it as nothing will work. Also mix release throws an error if it cannot find this file so building a release with this file missing doesn’t work either.
I wondered what do others do to work around this? I am currently going down the path of environment variables in production that the prod.exs file will pull in.
Does anyone know of a better way?
Where Next?
Trending in Questions
Other Trending Topics
Latest on Elixir Forum
Sponsor Spotlight
Supporting innovation across the BEAM ecosystem.
Categories:
Sub Categories:
Forums
Popular Tags
- #ecto
- #liveview
- #troubleshooting
- #learning-elixir
- #library
- #deployment
- #erlang
- #testing
- #genserver
- #mix
- #absinthe
- #remote-other
- #otp
- #plug
- #how-to-question
- #macros
- #postgres
- #elixirconf
- #channels
- #exunit
- #discussion
- #code-sync
- #podcasts
- #javascript
- #onsite
- #dialyzer
- #docker
- #authentication
- #umbrella
- #full-time-contract
- #podcasts-by-brainlid
- #ai
- #ecto-query
- #elixirconf-us
- #blog-post
- #elixir-ls
- #phoenix_html
- #iex
- #graphql
- #genstage
- #websockets
- #supervisor
- #advent-of-code
- #distillery
- #processes
- #elixirconf-eu
- #api
- #forms
- #metaprogramming
- #hex
Our Sponsors
Build Elixir applications with speed and confidence.
We build reliable cloud platforms for business-critical systems.
Catch errors, track performance, monitor hosts and more.
Error tracking, logs, uptime, and Just Enough APM. Built for developers.
Elixir, Erlang & BEAM conferences from Code Sync - join us in 2026!
Practical resources that improve the lives of professional developers.
Producing high quality Elixir screencasts since 2017.
**Building the future of software with AI, trust, and human connection.**
The team behind Membrane, Popcorn, LiveDebugger. Available for hire.
Courses that'll move you from confusion to "Aha, now I get it!"
Showing Posts 1 to 3- Show Best Posts
- Show All (oldest first)
- Show All (newest first)
NobbZ
Some CI Services allow to inject “hidden” files or environment variables.
So if possible let the service inject that file, if not create it from an environment variable in some of your steps.
In any case you should make sure, that no-one attacks your buildserver by injectiong a
catorechoin the scripts if they are version controlled.swelham
As far as I am aware the service I am using only supports secret variables, so I think I will actually try creating the file as part of the build - could create a mix task that does this and pull values from the environment.
A good heads up on the concern over
catandechoNobbZ
Of course these concerns are true for anything that creates output!
For CI tool we use internally at work I can see that it expands shell variables and then prints the command. So it happens that I have
echo $SECRETin the script butecho deadbeefin the logs… No problem for us, since everyone in the company does know that secret anyway and it is substituted here for something elseDuring CI there could be a compilation error in the generated prod.secret.exs and then a message printed like “there was an error near
deadbeef”.And probably other situations I am not ware of right now.