메뉴
Config management patterns: env vars, config files, settings structs, secrets injection. Validation, layering, fail-fast, twelve-factor.
Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.
SOC 직업 분류 기준
WCAG accessibility: semantic HTML, ARIA, keyboard nav, contrast, screen readers. For all user-facing interfaces.
Document architectural decisions using ADR format. Use during research when choosing approaches, introducing deps/patterns, or changing arch.
REST/HTTP API design: resource naming, status codes, error formats, versioning, pagination.
Kubernetes deployment and GitOps patterns: rolling/blue-green/canary strategies, ArgoCD/Flux manifests, K8s secrets management. Supplement to ci-cd-principles.
CI/CD pipeline patterns: stages, Dockerfile, GitHub Actions, artifact management, environment promotion, rollback. Layered by deployment complexity.
Structured code review protocol: inspect against full rule set. Use for audit workflows, code reviews, or when user requests review. Produces findings document with severity tags.
| name | configuration-management-principles |
| description | Config management patterns: env vars, config files, settings structs, secrets injection. Validation, layering, fail-fast, twelve-factor. |
| user-invocable | false |
Config: env-specific values (URLs, creds, timeouts), changes between envs, changes without deploy. Code: business logic, same across envs, requires deploy.
Never hardcode: ❌ const DB_URL = "postgresql://prod:5432" → ✅ const DB_URL = process.env.DATABASE_URL
Fail fast if required config missing/invalid. Clear error: "DATABASE_URL required."
Checks: type, format (URL/email/path), range (port 1-65535), dependencies (feature X → config Y required).
Hybrid: config files for structure + .env for secrets.
.env files: secrets + env-specific values only. Never committed except .env.template.
.env.template — blank values (COMMIT).env.development — local creds (DO NOT COMMIT)DEV_DB_HOST=123.45.67.89
DEV_DB_USERNAME=prod_user
DEV_DB_PASSWORD=a_very_secure_production_password
Feature files: grouped by function. Primary method for non-secret settings.
default: &default
adapter: postgresql
pool: 5
development:
<<: *default
host: localhost
database: myapp_dev
username: <%= ENV['DEV_DB_USERNAME'] %>
password: <%= ENV['DEV_DB_PASSWORD'] %>
production:
<<: *default
host: <%= ENV['PROD_DB_HOST'] %>
database: myapp_prod
username: <%= ENV['PROD_DB_USERNAME'] %>
password: <%= ENV['PROD_DB_PASSWORD'] %>
Feature flags are a distinct, PRD-gated concern — see @.gemini/skills/feature-flags-principles/SKILL.md.