Open source

rustenv

Inspect, validate and encrypt .env files from the terminal

BetaRustMIT

About

rustenv is a command line tool to inspect, compare, validate and export .env files. It masks values such as keys, passwords and tokens by default. It can merge files, create a .env from a template and encrypt a file with AES-256-GCM. The encryption key is derived from the password with a single unsalted SHA-256, so the project is in beta and long random passwords should be used.

Features

show: prints a .env file and masks secret-looking values (--unmask to reveal)
diff: lists added, removed and changed keys between two .env files
validate: checks empty values, key names, _URL, _EMAIL, _PORT and boolean values; exit code 1 on errors
export: default, shell, docker and json formats
merge and init: merge files, create .env from a template
encrypt and decrypt: AES-256-GCM into .env.enc

Requirements

Rust 1.85+ to build from source (edition 2024); Linux, macOS or Windows release binaries

Install

curl -fsSL https://raw.githubusercontent.com/Ankara-Software/rustenv/master/install.sh | sh

cargo install --git https://github.com/Ankara-Software/rustenv

Usage

rustenv show .env --unmask

rustenv diff .env .env.production

rustenv encrypt .env --password "long random password"

Typing the password on the command line saves it in your shell history; use an environment variable instead.

Want to contribute?

Bug reports and pull requests are handled on GitHub.

Report an issue All projects