Proxy

Associate a secret with its destination domain.

Usage

A proxy rule associates a secret with its destination domain:

env "STRIPE_SECRET_KEY", proxy: { domain: "api.stripe.com" }

The domain must be a DNS hostname. Schemes, ports, paths, wildcards, and IP addresses are not allowed. Domain names are normalized to lowercase.

proxy: false disables proxying for that variable, including an inherited rule. proxy: true is not supported. A proxy declaration does not start a proxy by itself; it is used by Dotenvx's credential-proxy integration.

Proxying is off by default.

Envfile Quickstart
Full Envfile Spec