Shim to load environment variables from .env
into ENV
in development.
Storing configuration in the environment is one of the tenets of a twelve-factor app. Anything that is likely to change between deployment environments–such as resource handles for databases or credentials for external services–should be extracted from the code into environment variables.
But it is not always practical to set environment variables on development machines or continuous integration servers where multiple projects are run. dotenv loads variables from a .env
file into ENV
when the environment is bootstrapped.
Add this line to the top of your application's Gemfile:
gem 'dotenv-rails', groups: [:development, :test]
And then execute:
$ bundle
dotenv is initialized in your Rails app during the before_configuration
callback, which is fired when the Application
constant is defined in config/application.rb
with class Application < Rails::Application
. If you need it to be initialized sooner, you can manually call Dotenv::Railtie.load
.
# config/application.rb
Bundler.require(*Rails.groups)
Dotenv::Railtie.load
HOSTNAME = ENV['HOSTNAME']
If you use gems that require environment variables to be set before they are loaded, then list dotenv-rails
in the Gemfile
before those other gems and require dotenv/rails-now
.
gem 'dotenv-rails', require: 'dotenv/rails-now'
gem 'gem-that-requires-env-variables'
Install the gem:
$ gem install dotenv
As early as possible in your application bootstrap process, load .env
:
require 'dotenv/load'
# or
require 'dotenv'
Dotenv.load
By default, load
will look for a file called .env
in the current working directory. Pass in multiple files and they will be loaded in order. The first value set for a variable will win.
require 'dotenv'
Dotenv.load('file1.env', 'file2.env')
Alternatively, you can use the dotenv
executable to launch your application:
$ dotenv ./script.rb
The dotenv
executable also accepts a single flag, -f
. Its value should be a comma-separated list of configuration files, in the order of most important to least. All of the files must exist. There must be a space between the flag and its value.
$ dotenv -f ".env.local,.env" ./script.rb
To ensure .env
is loaded in rake, load the tasks:
require 'dotenv/tasks'
task mytask: :dotenv do
# things that require .env
end
Add your application configuration to your .env
file in the root of your project:
S3_BUCKET=YOURS3BUCKET
SECRET_KEY=YOURSECRETKEYGOESHERE
Whenever your application loads, these variables will be available in ENV
:
config.fog_directory = ENV['S3_BUCKET']
You may also add export
in front of each line so you can source
the file in bash:
export S3_BUCKET=YOURS3BUCKET
export SECRET_KEY=YOURSECRETKEYGOESHERE
If you need multiline variables, for example private keys, you can double quote strings and use the \n
character for newlines:
PRIVATE_KEY="-----BEGIN RSA PRIVATE KEY-----\nHkVN9...\n-----END DSA PRIVATE KEY-----\n"
Alternatively, multi-line values with line breaks are now supported for quoted values.
PRIVATE_KEY="-----BEGIN RSA PRIVATE KEY-----
...
HkVN9...
...
-----END DSA PRIVATE KEY-----"
This is particularly helpful when using the Heroku command line plugin heroku-config
to pull configuration variables down that may have line breaks.
You need to add the output of a command in one of your variables? Simply add it with $(your_command)
:
DATABASE_URL="postgres://$(whoami)@localhost/my_database"
You need to add the value of another variable in one of your variables? You can reference the variable with ${VAR}
or often just $VAR
in unqoted or double-quoted values.
DATABASE_URL="postgres://${USER}@localhost/my_database"
If a value contains a $
and it is not intended to be a variable, wrap it in single quotes.
PASSWORD='pas$word'
Comments may be added to your file as such:
# This is a comment
SECRET_KEY=YOURSECRETKEYGOESHERE # comment
SECRET_HASH="something-with-a-#-hash"
If a particular configuration value is required but not set, it's appropriate to raise an error.
To require configuration keys:
# config/initializers/dotenv.rb
Dotenv.require_keys("SERVICE_APP_ID", "SERVICE_KEY", "SERVICE_SECRET")
If any of the configuration keys above are not set, your application will raise an error during initialization. This method is preferred because it prevents runtime errors in a production application due to improper configuration.
To parse a list of env files for programmatic inspection without modifying the ENV:
Dotenv.parse(".env.local", ".env")
# => {'S3_BUCKET' => 'YOURS3BUCKET', 'SECRET_KEY' => 'YOURSECRETKEYGOESHERE', ...}
This method returns a hash of the ENV var name/value pairs.
dotenv was originally created to load configuration variables into ENV
in development. There are typically better ways to manage configuration in production environments - such as /etc/environment
managed by Puppet or Chef, heroku config
, etc.
However, some find dotenv to be a convenient way to configure Rails applications in staging and production environments, and you can do that by defining environment-specific files like .env.production
or .env.test
.
If you use this gem to handle env vars for multiple Rails environments (development, test, production, etc.), please note that env vars that are general to all environments should be stored in .env
. Then, environment specific env vars should be stored in .env.<that environment's name>
.
dotenv-rails
will override in the following order (highest defined variable overrides lower):
Hierarchy Priority | Filename | Environment | Should I .gitignore it? |
Notes |
---|---|---|---|---|
1st (highest) | .env.development.local |
Development | Yes! | Local overrides of environment-specific settings. |
1st | .env.test.local |
Test | Yes! | Local overrides of environment-specific settings. |
1st | .env.production.local |
Production | Yes! | Local overrides of environment-specific settings. |
2nd | .env.local |
Wherever the file is | Definitely. | Local overrides. This file is loaded for all environments except test . |
3rd | .env.development |
Development | No. | Shared environment-specific settings |
3rd | .env.test |
Test | No. | Shared environment-specific settings |
3rd | .env.production |
Production | No. | Shared environment-specific settings |
Last | .env |
All Environments | Depends (See below) | The Original® |
Credentials should only be accessible on the machines that need access to them. Never commit sensitive information to a repository that is not needed by every development machine and server.
You can use the -t
or --template
flag on the dotenv cli to create a template of your .env
file.
$ dotenv -t .env
A template will be created in your working directory named {FINAME}.template
. So in the above example, it would create a .env.template
file.
The template will contain all the environment variables in your .env
file but with their values set to the variable names.
# .env
S3_BUCKET=YOURS3BUCKET
SECRET_KEY=YOURSECRETKEYGOESHERE
Would become
# .env.template
S3_BUCKET=S3_BUCKET
SECRET_KEY=SECRET_KEY
Personally, I prefer to commit the .env
file with development-only settings. This makes it easy for other developers to get started on the project without compromising credentials for other environments. If you follow this advice, make sure that all the credentials for your development environment are different from your other deployments and that the development credentials do not have access to any confidential data.
By default, it won't overwrite existing environment variables as dotenv assumes the deployment environment has more knowledge about configuration than the application does. To overwrite existing environment variables you can use Dotenv.overload
.
If you want a better idea of how dotenv works, check out the Ruby Rogues Code Reading of dotenv.
- Fork it
- Create your feature branch (
git checkout -b my-new-feature
) - Commit your changes (
git commit -am 'Added some feature'
) - Push to the branch (
git push origin my-new-feature
) - Create new Pull Request