Use SECRET_KEY_BASE from env, only default to fixed string in dev env

config/config.exs

@@ -12,7 +12,7 @@ config :asciinema,
 # Configures the endpoint
 config :asciinema, Asciinema.Endpoint,
   url: [host: "localhost"],
-  secret_key_base: System.get_env("SECRET_KEY_BASE") || "60BnXnzGGwwiZj91YA9XYKF9BCiM7lQ/1um8VXcWWLSdUp9OcPZV6YnQv7eFTYSY",
+  secret_key_base: System.get_env("SECRET_KEY_BASE"),
   render_errors: [view: Asciinema.ErrorView, accepts: ~w(html json)],
   pubsub: [name: Asciinema.PubSub,
            adapter: Phoenix.PubSub.PG2]

config/dev.exs

@@ -11,6 +11,7 @@ config :asciinema, Asciinema.Endpoint,
   debug_errors: true,
   code_reloader: true,
   check_origin: false,
+  secret_key_base: "60BnXnzGGwwiZj91YA9XYKF9BCiM7lQ/1um8VXcWWLSdUp9OcPZV6YnQv7eFTYSY",
   watchers: [node: ["node_modules/brunch/bin/brunch", "watch", "--stdin",
                     cd: Path.expand("../", __DIR__)]]
 

config/prod.exs

@@ -14,8 +14,7 @@ use Mix.Config
 config :asciinema, Asciinema.Endpoint,
   http: [port: {:system, "PORT"}],
   url: [scheme: "https", host: "asciinema.org", port: 443],
-  cache_static_manifest: "priv/static/manifest.json",
-  secret_key_base: System.get_env("SECRET_KEY_BASE")
+  cache_static_manifest: "priv/static/manifest.json"
 
 # Do not print debug messages in production
 config :logger, level: :info