🔐 Enver

Enver is a secure, cloud-native CLI tool for managing environment variables. It seamlessly integrates with Google Drive to provide encrypted backups, versioning, and smart restoration for your local .env files.

✨ Key Features

• 🛡️ AES-256-CBC Encryption: All environment files are encrypted locally with a developer-defined password BEFORE they touch the cloud.
• ☁️ Google Drive Integration: Uses your personal or workspace Google Drive as a reliable, zero-cost backup solution.
• 🚀 Advanced Restoration:
  • Interactive Diff: Preview line-by-line changes before restoring.
  • Smart Selection: Choose between specific versions or instantly grab the latest backup.
• 📁 Automated Organization:
  • Automatically organizes backups by project-name and version (from package.json).
  • Auto-Prunning: Keeps only the last 5 backups per project version to optimize storage.
• ⚙️ Configurable Security: Enable/disable encryption or set a global default password for seamless automation.

🛠️ Getting Started

1. Installation

Install Enver globally via NPM:

npm install -g enver-cli

2. Authentication

Link your Google account to authorize Drive access:

enver login

This will open a browser window for Secure OAuth2 authentication.

3. (Optional) Configuration

Set a global encryption password so you don't get prompted every time:

enver config password

🚀 Usage

Help & Commands

Get a full list of commands and options:

enver --help

Backup your Environment

Create an encrypted backup of your current .env file:

enver push

The tool automatically detects your project name and version from package.json.

Restore your Environment

Pull a backup back from Google Drive:

enver pull

You can choose a specific backup or use enver pull --latest to skip selection.

Toggle Encryption

If you are working in a safe local environment, you can disable encryption:

enver config encryption true/false

📁 Storage Architecture

Enver creates a structured hierarchy in your Google Drive:

Google Drive
└── Enver (Root Namespace)
    └── [project-name]-[v1.0.0]
        ├── [project]_.env_2026-02-10_02-46-20.enc
        └── [project]_.env_2026-02-11_10-00-00.enc

🔒 Security Principles

1. Zero-Knowledge: Your encryption password is never sent to Google and never stored on our servers.
2. Local Encryption: The CLI encrypts the payload in-memory before transmission.
3. Secure Config: Local configurations (including tokens) are stored in your home directory (~/.enver/) with restricted permissions.

🔗 Official Repositories

• CLI Tool: Enver-CLI
• Background Server: Enver-Server

🤝 Contributing

Contributions are welcome! Please feel free to submit a Pull Request.

📄 License

MIT © 2026 Nipuna Theekshana Hemal