<FromGitter>
<sam0x17> does the production encryption key get baked into the binary or do I have to include it in the same directory as the binary when I deploy?
<FromGitter>
<sam0x17> (using static compilation)
<FromGitter>
<damianham> You have to include it in the deployment but in the root folder of the application not in the bin folder where the binary is located.
<FromGitter>
<sam0x17> strangely, even though I have AMBER_ENCRYPTION_KEY set it's not using production settings
<FromGitter>
<sam0x17> AHA!!!
<FromGitter>
<sam0x17> apparently `config/environments/.production.enc` has to be present as well (I assumed that file was getting baked in)
<FromGitter>
<sam0x17> then just specify `-Dproduction` when building
<FromGitter>
<sam0x17> can someone give an example of whitelisting some specific origins using the CORS pipeline? It seems to be broken or I don't understand how to initialize it
<FromGitter>
<sam0x17> in particular, an origin like `*.domain.com`