Keep application secrets by project and environment

1. Open Secrets & environments and choose New project. Enter the Project name and the Environments (comma separated), for example development, production.
2. Open an environment and add secrets, one per line, with comments if you like. You can paste a whole .env file.
3. Use ${NAME} to refer to another secret.

Each change is kept: compare versions, see what changed, and roll back. You can also compare two environments.

Access

On the Access tab, give colleagues Read or Read & write per environment. Each environment has its own key: people only receive the keys of environments they can read. After removing someone, choose Rotate key.

Export

Export an environment as .env, JSON, YAML, a shell script, or a container environment file or secret. Exports are made in your browser.