Assuming I have the following line in Django settings:
OKPAY_API_KEY = os.environ.get('Ok_PAY_API_KEY')
Then import it to my build process in wercker CI
And then write this var to the entrypoint.sh
of my container in the build
step of wercker
. the following way:
export OKPAY_API_KEY=${OKPAY_API_KEY}
My question is, what if somebody gets access to that docker container some how or to the entrypoint.sh
file (say the docker repository is compromised or the attacker gets access to the running container).
Is there a better practice? or at least a way to further incapsulate this data?
P.S. The project in question is a BTC and Altcoin exchange, so the security of the funds of my users is the highest priority for me.