Environment variables

Secrets stay secret. Environment variables are stored encrypted, injected at runtime, and masked in the dashboard.

Adding variables

Add environment variables in the project settings or during project creation. You can paste them in KEY=VALUE format, one per line.

Encryption

All values are encrypted at rest in the database. They are only decrypted when injected into the container at runtime.

Masking

Variable values are masked in the dashboard by default. Click to reveal.

CLI

You can also manage environment variables from the command line:

risved env myproject                  # list variables
risved env myproject set KEY=VALUE    # set a variable
risved env myproject rm KEY           # remove a variable

Redeployment

Changing environment variables does not trigger a redeployment automatically. Deploy again to pick up the new values.