Skip to content

envite v1.0.0

Choose a tag to compare

View all tags
@Kevinsillo Kevinsillo released this 04 Oct 20:19
· 3 commits to main since this release
v1.0.0
3e374c7

First public release.

Security

  • Core dumps are disabled and new files are created owner-only at startup; envite warns when its configuration, logs or a local vault are readable by other users
  • Updates are downloaded over HTTPS and verified against the release's SHA256SUMS.txt before the binary is replaced; the checksums come from the same release (there is no signature yet)
  • Known limitation: SQLite pages held in memory cannot be guaranteed to be wiped

Added

  • Encrypted vaults: one .envite file per vault — a compressed SQLite database encrypted with XChaCha20-Poly1305 behind an authenticated header, with Argon2id key derivation (Standard and High presets)
  • Team members: every member opens the vault with their own password (per-member X25519 keys); add members, change your password or preset, and remove members with automatic key rotation
  • Projects, environments, sections and variables: project details, per-environment deploy targets, section comments, secret masking with on-demand reveal, enabled / disabled / commented states and custom ordering
  • Deploying .env files: a key-by-key diff with masked values, a warning when the target was changed outside envite, a backup of the previous file, and an atomic write with owner-only or group permissions — locally or over SSH
  • Importing existing .env files, deciding per key whether to overwrite or skip
  • Remote vaults over SSH, with connection reuse and terminal hand-over for interactive authentication; autosave, polling for changes saved elsewhere, and a three-way merge with a conflict resolution screen
  • History of the last 10 changes of every item — who, when and which fields — filterable by member, item type and action, without ever showing a value
  • Terminal interface: keyboard-driven screens with Ctrl-G help, auto-lock, a save-state indicator and NO_COLOR support
  • Command line and updates: envite --version, envite --help and envite update; Check for updates in the home menu and an optional daily check at startup
  • One-line installer for Linux x86_64 that verifies the SHA-256 of the download
Assets 4
Loading