removed strip secret key from config, revocked the key

2026-09-10 10:43:46 +02:00
parent 48c31420a7
commit a5b9c83fa4
2 changed files with 7 additions and 1 deletions
@@ -25,3 +25,9 @@

 # Another common use case is to set Drush's --uri via environment.
 # DRUSH_OPTIONS_URI=http://example.com
+
+# Stripe secret key for the "stripe" commerce payment gateway. Kept out of
+# config/sync (which ships an empty secret_key) and injected in settings.php
+# via getenv('STRIPE_SECRET_KEY'). Use a live key in production, a test key
+# (sk_test_...) everywhere else.
+# STRIPE_SECRET_KEY=