dotlock: Secure secrets for local Laravel development
SMRTR summary
Dotlock is a Laravel package that protects local development secrets by encrypting them with a passphrase instead of leaving them as plain text in `.env` files. Secrets are stored in an encrypted `.env.secrets` file and decrypted into memory only when running `php artisan dev`, so they are never written to disk. This protects against malicious dependencies or compromised apps reading sensitive API keys.
SMRTR provides this summary for quick context. The original article belongs to Daily.dev.
Read the original article