[NX-204] Create production secret management guide #14

Open
opened 2026-02-13 13:18:55 +00:00 by nessi · 0 comments
Owner

Goal

Avoid insecure secret handling in production deployments.

Scope

  • Document secure handling for JWT secret, encryption key, DB creds, SMTP creds.
  • Recommend env/secrets providers and rotation basics.

Acceptance Criteria

  • Clear “do/don’t” section exists.
  • No recommendation to hardcode secrets.
## Goal Avoid insecure secret handling in production deployments. ## Scope - Document secure handling for JWT secret, encryption key, DB creds, SMTP creds. - Recommend env/secrets providers and rotation basics. ## Acceptance Criteria - Clear “do/don’t” section exists. - No recommendation to hardcode secrets.
nessi added this to the v1.0 - Stability, Reliability & Security (P0) milestone 2026-02-13 13:18:55 +00:00
nessi added the P0 label 2026-02-13 13:18:55 +00:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: nessi/NexaPG#14