Configuration And Secrets

Cloud Configuration

• GCP Secret Manager stores sensitive configuration.
• Secret names use the xtrakt-json- prefix.
• Cloud Run services receive configuration through environment variables and mounted or injected secrets.

Local Configuration

• Local development uses appsettings.Development.json or appsettings.Local.json.
• Do not commit local secrets.
• Use development-only credentials for local testing.

NuGet Authentication

• Private packages require a personal access token with read:packages scope configured in nuget.config.
• CI uses GITHUB_TOKEN for GitHub Packages access.

Related Docs

• Deployment
• API Keys
• Security Overview