Migrate all secrets to config/secrets.yml

config/initializers/devise.rb

@@ -2,7 +2,7 @@
 # Many of these configuration options can be set straight in your model.
 Devise.setup do |config|
   # ==> Secret key, generate one with `rake secret`
-  config.secret_key = CONFIG['devise_secret_key']
+  config.secret_key = Rails.application.secrets.devise_secret_key
 
   # ==> Mailer Configuration
   # Configure the e-mail address which will be shown in Devise::Mailer,

config/initializers/hoptoad.rb

@@ -1,11 +1,11 @@
 HoptoadNotifier.configure do |config|
   # Change this to some sensible data for your errbit instance
-  config.api_key = CONFIG["errbit_key"] || ""
-  config.host    = CONFIG["errbit_host"] || ""
+  config.api_key = Rails.application.secrets.errbit_key || ''
+  config.host    = CONFIG['errbit_host'] || ''
   if config.api_key.blank? || config.host.blank?
-    config.development_environments = "production development test"
+    config.development_environments = 'production development test'
   else
-    config.development_environments = "development test"
+    config.development_environments = 'development test'
   end
 
   config.ignore_only = %w{ 
@@ -14,7 +14,7 @@ HoptoadNotifier.configure do |config|
  
   config.ignore_by_filter do |exception_data|
     ret=false
-    if exception_data[:error_class] == "ActionController::RoutingError" 
+    if exception_data[:error_class] == 'ActionController::RoutingError'
       message = exception_data[:error_message]
       ret=true if message =~ %r{\[GET\]}
     end

config/initializers/secret_token.rb

@@ -1,7 +0,0 @@
-# Be sure to restart your server when you modify this file.
-
-# Your secret key for verifying the integrity of signed cookies.
-# If you change this key, all old signed cookies will become invalid!
-# Make sure the secret is at least 30 characters and all random,
-# no regular words or you'll be exposed to dictionary attacks.
-Osem::Application.config.secret_token = CONFIG['cookies_secret_token']