Skip to content

v0.1.0

Latest
Latest

Choose a tag to compare

View all tags
@dkreuer dkreuer released this 10 Jul 07:24
v0.1.0
42848f6

DDEV Varlock v0.1.0

Initial release. Installs the Varlock CLI into the DDEV web container and wires it up so resolved secrets are actually available to your app — not just to ddev varlock commands.

Features

  • ddev varlock [command] — run any Varlock CLI command inside the web container (e.g. ddev varlock load, ddev varlock run -- <command>).
  • Secrets reach your running app automatically. A .ddev/web-entrypoint.d/varlock.sh script is sourced by DDEV right before nginx/php-fpm start, so resolved values are injected straight into the environment every request sees via getenv()/$_ENV — no need to wrap your app's own start command.
  • Fast local validation. A pre-start hook runs varlock load on the host for a readable summary before containers even come up. Optional: if Varlock isn't installed on your host, you get a notice instead of a failure, and ddev start continues normally.
  • Built-in provider passthrough for 1Password, Infisical (Universal Auth), Doppler, AWS Secrets Manager, and HashiCorp Vault — their host-exported tokens are forwarded into the web container automatically. Other providers (Azure Key Vault, Google Secret Manager, etc.) can be added per-project via ddev config --web-environment-add.
  • Configurable Varlock version. Pin a specific release with ddev dotenv set .ddev/.env.varlock --varlock-version=<version>; leave it unset to always install latest.

Installation

ddev add-on get MetaSyntactical/ddev-varlock
ddev restart

See the README for prerequisites, obtaining provider credentials, and configuration details.

Assets 2
Loading