Laravel Droplet Getting Started instructions needs .env security notice | Voters

Laravel Droplet Getting Started instructions needs .env security notice

Jake

The Laravel Droplet (https://marketplace.digitalocean.com/apps/laravel) automatically creates a working .env file. This file has the default settings of:
APP_ENV=local
APP_DEBUG=true
This is only acceptable settings for a local environment. In production this is a big security issue for Laravel applications as it is relatively easy to expose key environment variables.
Either the .env file should not be automatically generated or the Getting Started instructions should have a callout for inexperienced users to change these settings immediately.

January 25, 2022

John Gannon

Thanks for pointing this out. I've reached out to the Marketplace Vendor that provides the application to see if this is something that they can or should change.