Introduction
Keep whole env files in sync across your machines with a server you host.
envden syncs your .env files across your own machines. It preserves comments, key order and blank lines. Files are encrypted on your device before they reach a server you run over Tailscale.
Start syncing
Install envden, then run envden setup on your first machine. Setup creates your vault, gives you a recovery kit and asks which checkouts may receive env files.
Once you've joined another device, run these commands inside a tracked checkout:
envden pull
envden status
# edit your env files, then send the changes
envden pushSync happens when you push or pull. Your local files keep working while the server is unreachable.
How your files are stored
Each device keeps a store in ~/.envden/store. By default, approved checkouts link their env files to that store. Clones and worktrees of the same repo share a file after you approve each checkout. Choose copy mode when your tools need regular files.
Your server holds encrypted files and signed history. It can host several vaults, each owned by one person. envden doesn't share a vault with a team.
Read Security for the encryption model and its limits, or compare envden with other tools.