DOTENV_FILE=.env.ci

Decrypt your encrypted `.env.ci` by setting `DOTENV_PRIVATE_KEY` and `DOTENV_FILE=.env.ci` before dotenvx run.

Usage

$ touch .env.ci
dotenvx set HELLO "ci encrypted" -f .env.production
echo "console.log('Hello ' + process.env.HELLO)" > index.js

# check .env.keys for your privateKey
DOTENV_FILE=.env.ci DOTENV_PRIVATE_KEY="122...0b8" dotenvx run -- node index.js
⟐ injected env (2) from .env.ci
Hello ci encrypted

Alternatively, this can be already set on your server or ci runner.

DOTENV_FILE=.env.ci selects the file. DOTENV_PRIVATE_KEY supplies its matching decryption key.