.env versioning made easy
Envoy is a CLI tool that brings version control to your environment variables.
curl -fsSL https://raw.githubusercontent.com/denizlg24/envoy/master/install.sh | shGetting Started
Three commands to secure your environment variables
Initialize your project
Run envy init in your project directory. This creates a secure project ID and sets up local encryption. You'll be prompted for a passphrase that encrypts your environment files locally — the server never sees it.
$ envy init
Encrypt and commit your .env
Add your .env file to tracking with envy encrypt, then commit the changes. Files are encrypted client-side using XChaCha20-Poly1305 before being stored. Each file can have its own passphrase for granular access control.
$ envy encrypt && envy commit -m "Initial secrets"
Pull on any machine
Clone your repo on another machine and run envy pull. Enter your passphrase to decrypt and restore your environment files. Team members with access can pull using their own passphrase — no plaintext ever touches the wire.
$ envy pull