ddev VS Vault

Do you already want to try the new version, which is currently in alpha state? With DDEV this is super simple, just paste one command into the terminal.

For development, I will still prefer to continue with DDEV (a tool that I highly recommend). But the adventure with SQLite was very interesting, it really helped me not to pollute my termux.

I use https://ddev.com for almost all of my web project development, which basically automates all of this. Per-project databases, web containers, plugins, etc, and it’s now using Traefik as its router.

I use it with ddev for local development.

https://ddev.readthedocs.io/

With the right combination of overlapping interests, a lot can get done and incredible things get build. See for example the Drupal book or DDEV--both are extremely active Drupal projects, with lots of community activity, outside of drupal.org.

You can go from 0 to 100 quickly with DDEV or Lando: - https://docs.lando.dev/ - https://ddev.readthedocs.io/

For local: have you tried DDEV? Or Lando? they seem pretty fast to me. https://github.com/drud/ddev

Lando works great with Linux, use DDEV for Mac. Both are Docker-based.

With DDEV you can create Docker PHP + NodeJS environments which run on every operating systems in the same way. These environment configuration can be shared via git which makes open source software DDEV a great and robust choice for team projects.

HashiCorp Vault

For a more comprehensive and robust secret management solution, get your hands on tools like GCP Secret Manager, or HashiCorp Vault. They're like the security guards of your secrets, providing a safe house, access control, and keeping logs of who’s been snooping around.

HashiCorp Vault is a popular tool for managing secrets in Kubernetes clusters. It offers advanced features such as secure storage, encryption, dynamic secrets generation, and integration with Kubernetes through its Kubernetes authentication method.

So you've just bought a new platform tool? Maybe it's Hashicorp Vault? Snyk? Backstage? You’re excited about all of the developer experience, security and other benefits you're about to unleash on your company—right? But wait…

You seem to be looking for a cross-platform solution, and https://www.vaultproject.io/ provides just that. If everything was in AWS, AWS Secret Manager might be great, but imo Vault provides much better platform-agnostic capabilities.

https://github.com/openwrt/luci/blob/master/applications/luc...

https://developer.hashicorp.com/vault/tutorials/secrets-mana... https://github.com/hashicorp/vault :

> Refer to Build Certificate Authority (CA) in Vault with an offline Root for an example of using a root CA external to Vault.

Secret Management: Securely stores sensitive configuration data and secrets using tools like AWS Secrets Manager or HashiCorp Vault. Avoid hardcoding secrets in code or configuration files.

The author of this tool basically took the Shamir code from Hashicorp Vault, which is pretty mainstream. If you're looking for a solid implementation, I would start there[0]. I wouldn't use the Shamir code from this repo, as it's an old version of the vault code using field arithmetic that doesn't run in constant time.

[0]: https://github.com/hashicorp/vault/blob/main/shamir/shamir.g...

Out of curiosity, what do you mean by this? cross-cluster? they already have HA: https://github.com/hashicorp/vault/blob/v1.14.1/website/cont...

while digging up that link, I also saw one named replication: https://github.com/hashicorp/vault/blob/v1.14.1/website/cont...