You might like varlock.dev π§ββοΈ
Agree about the all or nothing problem in 1pass - although hopefully will be solved eventually.
We are about to roll out some nice built in local encryption tooling as well - using secure enclave & biometric unlock.
Posts by Theo Ephraim
Check out varlock
To celebrate @cloudflare.social's epic week - the new @varlock.dev workers integration got a revamp and it is RAD.
We totally fixed env vars in workers.
varlock.dev/integrations...
Full validation, pull from anywhere, set env atomically w/ each deploy. No more mix of .dev.vars/.env/wrangler.toml
@martr.app I assume you had much to do with the view transitions tooling for Astro. This was my first foray into using view transitions and it was really fun. Thanks for your work :)
thanks! I honestly haven't really seen anything like it :)
Took a lot of finnicky css and js to get it all working correctly.
Want to realize you've been storing your celery wrong your whole life? check out howtostore.food π₯¦π₯π
Idea has been kicking around in my head for 10+ years, finally made feasible by AI.
Still more to do, but very proud of the native view transitions! (built on @astro.build and @cloudflare.social)
you might like varlock.dev - there is a plugin system to pull from many different backends. Doppler plugin coming imminently. Plus it provides validation, leak prevention, and a lot more!
Please add a Vandelay Industries easter egg for importer/exporter features
Huge month for @varlock.dev
If you use next.js or cloudflare workers, take it for a spin and let me know what you think!
There's a lot more to it than just keeping your api keys safe from AI, and it's super useful whether or not you code with LLMs. But the problem has gotten significantly worse lately.
Give it a try, you might like itβ¦
RIGGED
I'm convinced a *good* dedicated desktop app is going to make us all laugh at the short lived CLI era of these tools.
I want to see @wesbos.com vs @joshwcomeau.com ! go go go
π SkyrocketingοΌ π (200+ new stars)
π¦ dmno-dev / varlock
β 2,270 (+357)
π TypeScript
.env files built for sharing powered by @env-spec decorator comments
We appreciate the post and the feedback @jesse.id !
Those getting started docs are due for an update :)
jesse.id/blog/posts/u...
π§ββοΈ
Thanks for writing about @varlock.dev!
One small note - the `account` param in the 1pass init is a hint to tie it to the 1pass org/account, so it wont accidentally try to read from your personal account which is usually separate. It's not 100% necessary but extra protection.
varlock was featured on our favourite webdev podcast @syntax.fm today :)
Check it out!
www.youtube.com/watch?v=M5Ik...
check out varlock.dev + 1Password - if youre already using 1pass (and many teams already are) there is no additional "secret zero" to set up, plus you get biometric unlock.
varlock has plugins for other tools too :)
Or folks can use varlock.dev :P which this is pulled from
`exec()` makes a lot more sense when you have an explicit function call syntax as a more general concept.
A ton of new stuff in varlock since the last time you probably looked :)
Probably more like run it in the background while you do other stuff, occasionally checking in. It will probably not take very long either.
Varlock was one of the projects selected for the @github.com Secure Open Source Fund!
We worked with security experts to level up our fundamentals like threat modeling, responsible disclosure, automated scanning, and more.
Here's what we learned and shipped:
varlock.dev/blog/github-...
you might like varlock.dev - lets you wire up individual 1P items/fields within a familiar .env style syntax. Plus it provides validation and extra security guardrails.
they now have an "environments" which syncs .env files.
But if you want an even more full featured toolkit (validation, flexible composition of values, security guardrails), use varlock.dev and the 1Password plugin
Native .env loading is great! But it can still be a bit cumbersome in larger, more complex projects, and you'll end up wiring together a few tools to get the whole job done. (loading, validation, types, composing values)
If you want a more modern and complete toolkit, you might like varlock.dev
Thanks so much for having us on :)