Documentation Index
Fetch the complete documentation index at: /llms.txt
Use this file to discover all available pages before exploring further.
sec://local/… — a gitignored JSON file for people without vault access yet.
DB_PASSWORD=sec://local/demo-db#password
.secrefs.local.json in the working directory:
{
"demo-db": { "password": "hunter2", "user": "postgres" },
"api-key": "plain-string-secrets-work-too"
}
.gitignore. It contains real values — it is the one
file in this workflow that does. Everything else SecRefs touches is safe to
commit, which is the point, and it is easy to forget that this file is the
exception..env stays identical to everyone else’s except for the provider segment.
It is not for production, and there is no mode in which it should be.