Encrypt a .env file in Bash

Encrypt a .env file in Bash with dotenvx, commit it safely, and inject its secrets at runtime.

1. Install

Get the Dotenvx CLI.

$ curl -sfS https://dotenvx.sh | sh
◈ installed (dotenvx)

more install options

Encrypt your .env file.

$ dotenvx encrypt
◈ encrypted (.env)

Then inject your encrypted secrets at runtime with dotenvx run.

dotenvx run --quiet -- sh -c 'echo Hello $HELLO'