How to generate, manage and use env-specific encrypted credentials in rails 5.2

creds.rb

# generate and edit env-specific encrypted credentials 
EDITOR=nano bin/rails encrypted:edit config/development.yml.enc --key config/development.key

# override credentials in application.rb
def credentials
  encrypted(
    "config/#{Rails.env.downcase}.yml.enc",
    key_path: "config/#{Rails.env.downcase}.key"
  )
end

# use in the application like this 
database: <%= Rails.application.credentials.database %>