How does dotenv sync work?

[mathiasfoster]

I've been accepted to the Beta for Dotenv Sync, but I'm reluctant to use it until I understand more about how it works.

• How do you ensure that others can't access my secrets?
• How are secrets shared across machines?

[motdotla]

Just saw this. Apologies for the delay, @mathiasfoster. (Notifications turned on going forward.)

Good questions. I can give you my word the architecture has been designed in a way that heavily prioritizes security. This includes a dedicated vault for secrets - separate from the business logic databases. This also includes a hook in that dedicated vault infrastructure that will permit you to eventually bring your own vault.

But there is not documentation/whitepapers for all this yet so I do not expect you to take my word. I would not in your position. That documentation is coming soon.

https://docs.dotenv.org/

In the meantime, could you reply back to me at the invitation email you received? I would be happy for us to get on a zoom call and show you the security and vault architecture directly.

[motdotla]

Hi @mathiasfoster:

Documentation has come together.

Here is a Security Overview: https://docs.dotenv.org/v1/security/overview

And here is documentation on the various security aspects of Dotenv Sync: https://docs.dotenv.org/v1