doppler
Use doppler to fetch secrets. Requires DOPPLER_TOKEN env var (service token scoped to project).
Setup
- Create project in Doppler dashboard
- Add secrets (GEMINI_API_KEY, BREX_TOKEN, etc.)
- Generate service token for project/config
- Set
DOPPLER_TOKENon server
Common commands
Get a single secret:
doppler secrets get GEMINI_API_KEY --plain
List all secrets (names only):
doppler secrets --only-names
List secrets with values:
doppler secrets
Run a command with secrets injected:
doppler run -- some-command
Download secrets as JSON:
doppler secrets download --no-file --format json
Notes
- Service tokens are scoped to a single project + config (e.g.,
dev,prod) --plainstrips quotes/newlines for scripting- Never log or echo secret values
- Prefer
doppler secrets get <NAME> --plainfor single secrets