@dpehrson I prefer myself the ENV approach (since I prefer to host my apps in Heroku) but it is not the default of rails apps. 

In my case I'll edit this file and replace the secret_key_base in production section with  <%= ENV["SECRET_KEY_BASE"] %>, I allowed ERB intentionally in this file to do it.