I have an open source website. I need to add an admin section to the website which is accessible to only one person. To make it secure, I was thinking about providing a login page which checks if the password matches to a predefined password and sets a session indicating the login was successful. This password will be stored as an environment variable in the server.
Do you think this approach is secure? This website does not have a database. So I don't want to add dependency to a database just for keeping user accounts and passwords.
Website is written using