Variables and secrets
Variables can reference other projects, so an address changes in one place. Secrets are sealed on the server, can rotate on a schedule, and can come from Infisical, Vault, Doppler or 1Password.
Open source, MIT licensed · Runs on any Linux server with Docker
Sound familiar?
The same API address lives in five env files until one is missed. A password pasted into a variable is readable by anyone who can open the project.
How it works
Write ${{ shop.API_URL }} and the value follows the shop project.
A secret can be replaced but never read back. Projects use it as ${{ secret.NAME }}.
Generate and rotate a secret on a schedule, or read it from a secret manager on every deploy.
Sealed on your server. They are resolved into the project's environment when it starts.
Infisical, HashiCorp Vault, Doppler and 1Password.
More of FlatRun