id,page,ref,title,content,breadcrumbs,references
plugins:plugins-configuration-secret,plugins,plugins-configuration-secret,Secret configuration values,"Some plugins may need configuration that should stay secret - API keys for example. There are two ways in which you can store secret configuration values. 
                 As environment variables . If your secret lives in an environment variable that is available to the Datasette process, you can indicate that the configuration value should be read from that environment variable like so: 
                 [[[cog
config_example(cog, {
    ""plugins"": {
        ""datasette-auth-github"": {
            ""client_secret"": {
                ""$env"": ""GITHUB_CLIENT_SECRET""
            }
        }
    }
}) 
                 ]]] 
                 [[[end]]] 
                 As values in separate files . Your secrets can also live in files on disk. To specify a secret should be read from a file, provide the full file path like this: 
                 [[[cog
config_example(cog, {
    ""plugins"": {
        ""datasette-auth-github"": {
            ""client_secret"": {
                ""$file"": ""/secrets/client-secret""
            }
        }
    }
}) 
                 ]]] 
                 [[[end]]] 
                 If you are publishing your data using the  datasette publish  family of commands, you can use the  --plugin-secret  option to set these secrets at publish time. For example, using Heroku you might run the following command: 
                 datasette publish heroku my_database.db \
    --name my-heroku-app-demo \
    --install=datasette-auth-github \
    --plugin-secret datasette-auth-github client_id your_client_id \
    --plugin-secret datasette-auth-github client_secret your_client_secret 
                 This will set the necessary environment variables and add the following to the deployed  metadata.yaml : 
                 [[[cog
config_example(cog, {
    ""plugins"": {
        ""datasette-auth-github"": {
            ""client_id"": {
                ""$env"": ""DATASETTE_AUTH_GITHUB_CLIENT_ID""
            },
            ""client_secret"": {
                ""$env"": ""DATASETTE_AUTH_GITHUB_CLIENT_SECRET""
            }
        }
    }
}) 
                 ]]] 
                 [[[end]]]","[""Plugins"", ""Plugin configuration""]",[]