@dotenvup/cli
v0.3.0
Published
CLI tool for managing .env.up encrypted environment files
Maintainers
Readme
@dotenvup/cli
CLI for .env.up — encrypt .env, lock/unlock, inject env without writing plaintext (up run --).
npm install -g @dotenvup/cliCommands
up init # Generate local keypair (~/.dotenvup/)
up import .env # Encrypt .env → .env.up (merges if .env.up exists)
up lock # Delete plaintext .env
up unlock --duration 5m # Write .env for a limited time
up show # Print decrypted values (never log in CI)
up run -- npm start # Run a command with decrypted env (no .env on disk)
up keys # List key names (no decryption)
up status # Lock state + identity storage
up verify # Structural + policy checks (no values)
up reencrypt # Full re-wrap (full-catalog holder only when [policy] present)
up recipients add|list|removeTeam files with [policy]: merge import, per-recipient payloads, up verify. All teammates MUST use this CLI version — older up import can wipe secrets other people hold. Guide: USER_GUIDE.md.
License
MIT — dotenvup.com
