envpact

Secrets vault — chirag127's tool, primary store for cross-site secrets

envpact

Role

Single source of truth for environment secrets across the family. Every site / Worker / GitHub Action reads from envpact at deploy.

Free tier

• Self-hosted / personal use, no quota
• Owner: the user (chirag127/envpact repo)

Card / subscription required?

NO. It’s the user’s own tool.

Alternatives

• Doppler free (5 users)
• Infisical (5 users)
• GitHub Secrets only (loses cross-repo)

Swap cost

High — every site reads via the envpact client. Swap means rewriting the secret-pull step in every site’s deploy and every Worker’s startup.

Why this is our pick

Owned by the user, fits the family’s trust model, and the secret shape is already aligned to it.

Cross-refs

• GitHub Actions — pulls secrets at deploy
• Cloudflare Workers

Edit on GitHub · Back to index