Yaya kuke sarrafa jimloli da sirrai a Node?

Question

Accepted Answer

Jimloli (URLs bangare data, maɓalliya API, tashar jiya, alamu sifa) ya kamata su kasance **a wajen gida daga gida mai siffa** a cikin mahimman yanayi — don kace ba a ɓugge. Wannan yana riƙe sirrai daga sarrafawa tsari kuma ya ba da damar gida sama ɗin running a dev, waje, da kera tare da daban-daban saiti.

## Mahimmin abu: sarrafa jigon yanayi

```js
// ❌ NEVER hardcode secrets — they end up in git history forever
const dbUrl = "postgres://admin:password123@db.example.com";

// ✅ read from the environment
const dbUrl = process.env.DATABASE_URL;
const port = process.env.PORT || 3000;
```

Wannan ya bi **app maɓuɓɓuge-gida** mahimmin abu: tsaurawa m sakewa sarrafa jiga daga gida, don haka aiki zuwa sabuwar yanayi yana nufin canja mahimmin yanayi, ba gida ba.

## Gida gida: `.env` fayil

```bash
# .env — local values, GITIGNORED (never committed)
DATABASE_URL=postgres://localhost/myapp_dev
JWT_SECRET=dev-secret
PORT=3000
```

```js
// load .env into process.env (older: dotenv; newer Node: --env-file flag)
import "dotenv/config";        // or: node --env-file=.env app.js
const secret = process.env.JWT_SECRET;
```

Fayil `.env` yana riƙe gida sarrafa jiga; ya **kamata kasance gitignored**. Dangina fayil `.env.example` (tare da maɓalliya amma ba mahimmancin duka ba) don ƙididdiga abin da aka buƙata.

## Bincika sarrafa jiga akan farko

```js
import { z } from "zod";

const env = z.object({
  DATABASE_URL: z.string().url(),
  JWT_SECRET: z.string().min(16),
  PORT: z.coerce.number().default(3000),
}).parse(process.env); // ❗ fail FAST at startup if config is missing/invalid
```

Bincika mahimmin yanayi akan farko (tare da zod/envalid) yana nufin cewa asiri mara gida ko marasa laifi ɗin ya fallasa jiya tare da sarrafa bayanin bayani — mun shimfiɗa wa ƙanƙantar aiki waje tsofaffiyar kunaɗi a jigon buƙatawa.

## Sirrai a kera

```text
Dev:        .env file (gitignored)
Production: injected by the platform/orchestrator —
            cloud secret managers (AWS Secrets Manager, GCP Secret Manager, Vault),
            container/orchestrator env vars, CI/CD secrets.
Never put production secrets in .env files committed or shipped with the app.
```

## Takaita shigowa

```js
// config.js — one validated config module the app imports (don't sprinkle process.env everywhere)
export const config = { dbUrl: env.DATABASE_URL, port: env.PORT };
```

## Me ya sa ya kamata

Daida sarrafa jiga da sirrai ba shi ne kawai rashin ƙasa ba harkokin nufin gida kuma gida matsayar hanya.

Ruɓa sirrai kan gida yana bada su a cikin sarrafawa tsari (karamin sakewa, gida sani); tasa sarrafa jiga gida yana sa aiki wajen waje tsofaffiyar waje aiki.

Sauran hanya — mahimmin yanayi, gitignored `.env` don gida gida, `.env.example` don rubuta, bincika akan farko, da gida sirrai masu sarrafa a kera — yana riƙe sirrai masu lafiya, yana sa app mai aiki wajen waje, da sarrafa marasa gida gida.

A zahiri gida aiki Node gida jiya gida.

Mahimmin abu: sarrafa jigon yanayi

Gida gida: .env fayil

Bincika sarrafa jiga akan farko

Sirrai a kera

Takaita shigowa

Me ya sa ya kamata

Gida gida: `.env` fayil