CREDENTIALS

Credentials & Env Files

Keep secrets local, loaded from ~/.config/agentic-workstation/env.d/, and out of git.

---

How it works

Files ending in .env are sourced automatically. Files ending in .example or .disabled are ignored.

Enable or disable a service

# Enable
cp ~/.config/agentic-workstation/env.d/jira.env.example ~/.config/agentic-workstation/env.d/jira.env
$EDITOR ~/.config/agentic-workstation/env.d/jira.env

# Disable without deleting
mv ~/.config/agentic-workstation/env.d/jira.env ~/.config/agentic-workstation/env.d/jira.env.disabled

# Re-enable later
mv ~/.config/agentic-workstation/env.d/jira.env.disabled ~/.config/agentic-workstation/env.d/jira.env

Common files

Service	File
Jira	~/.config/agentic-workstation/env.d/jira.env
Confluence	~/.config/agentic-workstation/env.d/confluence.env
Figma	~/.config/agentic-workstation/env.d/figma.env

Common checks

dots-loadenv
dots-doctor

dots-doctor lists the file names it can see, but never prints secret values.

Security reminders

• Use the minimum token scope required.
• Do not paste secrets into chat.
• Do not commit *.env files.