implement secrets read from env vars

2026-10-06 16:00:51 -05:00
parent 576199b1e9
commit 370fe2e4aa
10 changed files with 49 additions and 17 deletions
@@ -36,6 +36,18 @@ Additionally, Cargo.toml may need updating as new versions of the dependencies a
 cargo leptos watch
 ```

+Copy `dev.env` to `.env`, then replace the placeholder with a unique secret
+before starting the server. The `.env` file is loaded automatically at startup
+and is ignored by Git. `DEV_SECRET_KEY` authorizes server status changes and
+submission-history access:
+
+```powershell
+Copy-Item dev.env .env
+```
+
+You can also provide `DEV_SECRET_KEY` through the process environment. Do not
+commit secrets or expose them in client-side code.
+
 ## Installing Additional Tools

 By default, `cargo-leptos` uses `nightly` Rust, `cargo-generate`, and `sass`. If you run into any trouble, you may need to install one or more of these tools.