awesome-repositories.com
Blog
MCP
awesome-repositories.com

Discover the best open-source repositories with AI-powered search.

ExploreCurated searchesOpen-source alternativesSelf-hosted softwareBlogSitemap
ProjectMCP serverAboutHow we rankPress
LegalPrivacyTerms
© 2026 Bringes Technology SRL·VAT RO45896025·hello@awesome-repositories.com
dotenvx avatar

dotenvx/dotenvx

0
View on GitHub↗

AI search

Explore more awesome repositories

Describe what you need in plain English — the AI ranks thousands of curated open-source projects by relevance.

Start searching with AI
dotenvx.com/docs
↗

Dotenvx

dotenvx is a cross-platform command-line tool that encrypts .env files using public-key cryptography and decrypts them at runtime, injecting the plaintext secrets into a process environment before execution. It treats encrypted environment files as self-contained vaults that are loaded and decrypted entirely in memory each time a command runs.

What sets dotenvx apart is its ability to armor the private decryption key itself with a passphrase, allowing that key to be stored remotely and retrieved only when decryption is needed. A single encrypted vault file can be bound to multiple per-environment decryption keys, so one artifact can unlock different secrets in development, staging, and production. The tool also supports public-key generation and encryption in a single command, and it can encrypt environment files for CI pipelines, commit them safely to version control, and deploy encrypted variables to cloud platforms with a single automated command.

Beyond its core encryption and injection workflow, dotenvx offers on-demand variable decryption, runtime secret injection for serverless functions and task runners, and integrations with frameworks such as Astro. It provides automatic key generation, keyless decryption that discards keys after use, and private key armoring for secure off-device storage. The tool also keeps encrypted environment variables hidden from AI agents while still allowing them to inspect and run projects.

Features

  • File Encryption - Encrypts entire .env files with public-key cryptography for safe version control and storage.
  • Encryption CLI Utilities - Ships a dedicated CLI for encrypting .env files with public-key cryptography and decrypting them at runtime.
  • Runtime Environment Variable Injections - Decrypts an encrypted vault file then injects the plaintext variables into a child process's environment before the command begins.
  • Per-Environment Vault Bindings - Dotenv Vault manages different sets of environment variables for each deployment environment, loading the appropriate encrypted file and using per-environment decryption keys.
4,974 stars·118 forks·JavaScript·bsd-3-clause·21 views
  • Process Injection Wrappers - Acts as a process wrapper that decrypts and injects environment variables before executing the target command.
  • Environment File Encryptors - Dotenv Vault encrypts environment variable files and injects them into build or runtime processes using a private decryption key in a single command.
  • Environment File Vaults - Treats the encrypted .env file as a single-file vault that is loaded and decrypted entirely in memory before the application runs.
  • Cross-Platform Encryption Utilities - Provides a cross-platform CLI tool that encrypts and decrypts environment files consistently across local, CI, cloud, and serverless platforms.
  • Runtime Secret Injection - Provides automated decryption of encrypted .env files and injection of secrets into the process environment at startup.
  • GPG Key-Based File Encryption - Encrypts a plaintext .env file using an asymmetric keypair so secrets stay encrypted at rest and decrypt only at process start.
  • Public-Key Vault Generators - Generates a public-private key pair and immediately encrypts the environment file, keeping the public key in clear text and the private key separate.
  • Deployment Decryptions - Dotenv Vault injects decrypted environment variables from an encrypted file at application start during each deployment, for any hosting platform.
  • Environment Variable Key Configurations - Configuring separate decryption keys for each deployment environment so the same encrypted file can be reused with different secrets.
  • Per-Environment Key Bindings - Assigns per-environment decryption keys to the same encrypted vault file, allowing one artifact to unlock different secrets in dev, staging, and production.
  • Password-Protected Key Armor Utilities - Encrypts the private key itself with a passphrase so it can be stored remotely and synced only when a decryption workflow is triggered.
  • Version-Controlled Secret Encryption - Dotenv Vault commits encrypted .env files to version control while keeping decryption keys separate, preserving developer workflow without exposing secrets.
  • File-Based Loading - Loads environment variables from plaintext .env files into the process environment, supporting both CLI and programmatic usage.
  • Encrypted Variable Deployers - Dotenv Vault sets up encrypted environment variables for deployment on container and hosting platforms through a single command.
  • Environment Variable Deployers - Dotenv Vault deploys encrypted environment variables to cloud platforms using a single command, automating setup for each target environment.
  • Cross-Platform Execution - Dotenv Vault executes the same encryption and injection tool across different languages and environments without custom integrations.
  • Secrets Deployment Pipelines - Deploying encrypted environment variables to cloud, serverless, and container platforms using a single decryption workflow.
  • Serverless & Task Secret Injections - Dotenv Vault decrypts and injects environment variables from encrypted files into serverless functions and remote task runners during execution.
  • Key Generation Utilities - Automatically generates encryption keys as part of the encrypted environment setup process.
  • Ephemeral Key Retrieval Methods - Implements keyless decryption by retrieving private keys from memory only when needed and discarding them immediately.
  • On-Demand Secret Decryption - Provides on-demand decryption of environment variables, only decrypting secrets when accessed rather than at process startup.
  • Framework Integrations - Dotenv Vault integrates encrypted environment variables into the Astro framework, decrypting and injecting them during application startup.
  • Configuration Management - Manage and inject environment variables from .env files.

    • Star history

    Star history chart for dotenvx/dotenvxStar history chart for dotenvx/dotenvx

    How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.

    Frequently asked questions

    What does dotenvx/dotenvx do?

    dotenvx is a cross-platform command-line tool that encrypts .env files using public-key cryptography and decrypts them at runtime, injecting the plaintext secrets into a process environment before execution. It treats encrypted environment files as self-contained vaults that are loaded and decrypted entirely in memory each time a command runs.

    What are the main features of dotenvx/dotenvx?

    The main features of dotenvx/dotenvx are: File Encryption, Encryption CLI Utilities, Runtime Environment Variable Injections, Per-Environment Vault Bindings, Process Injection Wrappers, Environment File Encryptors, Environment File Vaults, Cross-Platform Encryption Utilities.

    Which projects share features with dotenvx/dotenvx?

    Projects with overlapping indexed features include: dotenv-org/dotenv-vault — Dotenv-vault is a centralized platform for managing, synchronizing, and injecting encrypted environment variables… thelocehiliosan/yadm — yadm is a dotfile manager that uses Git as its underlying version control engine to track, synchronize, and manage… backup/backup — This project is a Unix backup orchestrator used for modeling and executing full-stack data protection. It functions as… joho/godotenv — godotenv is a Go library designed to load, parse, and serialize environment configuration files. It provides tools to… bkeepers/dotenv — Dotenv is a Ruby library used for loading key-value pairs from files into an application environment. It includes a… theskumar/python-dotenv — python-dotenv is a library and command line interface for managing environment variables in Python applications. It…

    Projects sharing features with Dotenvx

    These projects share indexed features with Dotenvx. Shared tags can include platform or build tooling; verify the primary use case before treating a result as a replacement.
    • dotenv-org/dotenv-vaultdotenv-org avatar

      dotenv-org/dotenv-vault

      1,244View on GitHub↗

      Dotenv-vault is a centralized platform for managing, synchronizing, and injecting encrypted environment variables across development, staging, and production environments. It functions as a secure vault that converts local configuration files into encrypted payloads, ensuring that sensitive credentials remain protected during version control and distribution. The platform distinguishes itself through its ability to maintain consistent configuration states across local machines and remote cloud infrastructure. It utilizes environment-specific key management and symmetric-key encryption to auth

      TypeScriptdotenvenvsecrets
      View on GitHub↗1,244
    • thelocehiliosan/yadmTheLocehiliosan avatar

      TheLocehiliosan/yadm

      6,328View on GitHub↗

      yadm is a dotfile manager that uses Git as its underlying version control engine to track, synchronize, and manage configuration files across multiple machines. It keeps dotfiles in their original home directory locations while providing a system for deploying different file versions based on operating system, hostname, or hardware architecture through an alternate file naming convention. The tool distinguishes itself through several integrated capabilities that go beyond basic version control. It includes a template-based configuration generation system that renders files by merging template

      Python
      View on GitHub↗6,328
    • backup/backupbackup avatar

      backup/backup

      4,868View on GitHub↗

      This project is a Unix backup orchestrator used for modeling and executing full-stack data protection. It functions as a management system for database dumps, encrypted archiving, version rotation, and remote storage transport. The system distinguishes itself by orchestrating native system tools for various databases, including PostgreSQL, MySQL, MongoDB, Redis, and Riak. It employs a secure archive workflow that combines compression and encryption using GPG, OpenSSL, or AES before transporting packages to S3-compatible services, Dropbox, or remote servers via SFTP and RSync. Broad capabilit

      Ruby
      View on GitHub↗4,868
  • bkeepers/dotenvbkeepers avatar

    bkeepers/dotenv

    6,758View on GitHub↗

    Dotenv is a Ruby library used for loading key-value pairs from files into an application environment. It includes a configuration parser to extract variables into hashes and a loader to inject those pairs into the global environment. The project features a variable interpolator that resolves environment variables and shell command outputs within configuration values. It also provides a validator to verify that required configuration keys are present during application initialization. The toolset covers environment variable management, including the ability to generate configuration templates

    Ruby
    View on GitHub↗6,758
    • Compare all 30 related projects→