doppler
Use doppler to fetch secrets. Requires DOPPLER_TOKEN env var (service token scoped to project).
Setup
- •Create project in Doppler dashboard
- •Add secrets (GEMINI_API_KEY, BREX_TOKEN, etc.)
- •Generate service token for project/config
- •Set
DOPPLER_TOKENon server
Common commands
Get a single secret:
bash
doppler secrets get GEMINI_API_KEY --plain
List all secrets (names only):
bash
doppler secrets --only-names
List secrets with values:
bash
doppler secrets
Run a command with secrets injected:
bash
doppler run -- some-command
Download secrets as JSON:
bash
doppler secrets download --no-file --format json
Notes
- •Service tokens are scoped to a single project + config (e.g.,
dev,prod) - •
--plainstrips quotes/newlines for scripting - •Never log or echo secret values
- •Prefer
doppler secrets get <NAME> --plainfor single secrets