{"repo":"MaximoCoder/Enveil","free":true,"listed":false,"github":"https://github.com/MaximoCoder/Enveil","clone":"git clone https://github.com/MaximoCoder/Enveil.git","description":"Keep secrets out of .env files. Encrypted vault with runtime injection — works locally or synced across a team via self-hosted server.","language":"Go","stars":15,"topics":["encryption-decryption","env","environment--development","environment-variables","go","self-hosted","cli-tool"],"license":"MIT","category":"self-hosted-apps","readme_excerpt":"Enveil Enveil keeps your environment variables encrypted and out of your filesystem — for individuals and teams. Most developers store secrets in .env files. Those files get accidentally committed to version control, shared over Slack, read by AI coding tools with filesystem access, and left behind on old machines. Enveil eliminates the file entirely. Secrets live in an encrypted vault and are injected directly into your process at runtime — they never touch disk as plaintext, not even temporarily. For teams, Enveil goes further: a self-hosted server lets every developer share the same encrypted secrets without .env files, chat messages, or shared drives. One developer sets a variable; everyone else has it immediately. How it works When you run enveil run npm run dev , Enveil: 1. Derives a 256-bit key from your master password using Argon2id (64MB memory, 4 threads) — resistant to GPU and ASIC brute-force attacks 2. Decrypts the SQLCipher vault at /.enveil/vault.db — the entire file is encrypted with AES-256, including table names, project names, and variable names 3. Reads the variables for the active project and environment 4. Spawns your process with those variables injected via syscall.Exec — no temporary files, no subshells, no intermediate writes 5. The master key lives only in memory for the duration of the command, then is gone The vault file is opaque binary. Without the master password, it is indistinguishable from random noise. For teams using the server, values ar","default_branch":null,"files":null,"tree":[],"storefront":"/r/MaximoCoder","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/MaximoCoder/Enveil/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}