dotenv-flow

dotenv is a zero-dependency npm module that loads environment variables from a .env file into process.env.

dotenv-flow extends dotenv adding the ability to have multiple .env* files like .env.development, .env.test and .env.production, also allowing defined variables to be overwritten individually in the appropriate .env*.local file.

Storing configuration in environment variables separate from code and grouping them by environments like development, test and production is based on The Twelve-Factor App methodology.

Installation

Using NPM:

$ npm install dotenv-flow --save

Using Yarn:

$ yarn add dotenv-flow

Usage

As early as possible in your application, require and configure dotenv-flow.

require('dotenv-flow').config();

This will read environment variables from the .env file allowing them to be overwritten locally in the .env.local file.

When running, your process.env will have keys and values you've defined in your .env* files.

Additionally, if the NODE_ENV environment variable is set, then .env.${NODE_ENV} and the appropriate .env.${NODE_ENV}.local files are also be loaded.

For example, let's suppose that you have the following .env.* files in your project:

# .env

DATABASE_HOST=127.0.0.1
DATABASE_PORT=27017
DATABASE_USER=default
DATABASE_PASS=
DATABASE_NAME=my_app

# .env.local

DATABASE_USER=local-user
DATABASE_PASS=super-secret

# .env.development

DATABASE_NAME=my_app_dev

# .env.test

DATABASE_NAME=my_app_test

# .env.production

DATABASE_NAME=my_app_prod

# .env.production.local

DATABASE_HOST=10.0.0.32
DATABASE_PORT=27017
DATABASE_USER=devops
DATABASE_PASS=1qa2ws3ed4rf5tg6yh
DATABASE_NAME=application_storage

// your_script.js

require('dotenv-flow').config();

console.log('database host:', process.env.DATABASE_HOST);
console.log('database port:', process.env.DATABASE_PORT);
console.log('database user:', process.env.DATABASE_USER);
console.log('database pass:', process.env.DATABASE_PASS);
console.log('database name:', process.env.DATABASE_NAME);

And if you run your_script.js in the development environment, like:

$ NODE_ENV=development node your_scrips.js

you'll get the following output:

database host: 127.0.0.1
database port: 27017
database user: local-user
database pass: super-secret
database name: my_app_dev

Or if you run the same script in the production environment:

$ NODE_ENV=production node your_script.js

you'll get the following:

database host: 10.0.0.32
database port: 27017
database user: devops
database pass: 1qa2ws3ed4rf5tg6yh
database name: application_storage

And as you may already understood, the .env*.local files should be ignored by your version control system (refer the Files under version control section below to learn more), and you'll have the .env.production.local file only on your production deployment machine.

NODE_ENV-specific env files

Actually, dotenv-flow doesn't have any predefined environment names, so you may use whatever names you want. However, it's a good practice to use the world's universally recognized environment names like development, test, production, as well as frequently used qa or stage.

The naming convention for NODE_ENV-specific files is simply as .env.${NODE_ENV}[.local] (i.e. .env.development, .env.test, .env.production, .env.development.local, .env.production.local, etc.).

To activate specific environment run your application with predefined NODE_ENV environment variable, like:

$ export NODE_ENV=production
$ node your_script.js

or:

$ NODE_ENV=production node your_script.js

If you are on Windows:

> SET NODE_ENV=production
> node your_script.js

Or even better, use cross-env to make it work independent of platform:

$ cross-env NODE_ENV=production node your_script.js

The --node-env switch is also supported:

$ node your_script.js --node-env=production

Preload

Alternatively, you can preload dotenv-flow using node's -r (--require) command line option.

$ NODE_ENV=production node -r dotenv-flow/config your_script.js

or:

$ node -r dotenv-flow/config your_script.js --node-env=production

You can also use environment variables to set configuration options when preloading the dotenv-flow/config:

$ DOTENV_FLOW_PATH=/path/to/env-files-dir node -r dotenv-flow/config your_script.js

Refer to the dotenv-flow/config options section below to see all available options.

Files under version control

The main point here is not to commit production database passwords, API keys and other sensitive things to your source code repository, but it's still nice to have default database connections, ports, hosts, etc., for development and testing purposes to keep your code clean and simple.

Understanding the above, we have the following approach:

You can keep all the fallback values in the default .env file, that (if exists) will always be loaded by default. Also, it is a good place to have all the application used environment variables there, thus having a reference of environment variables that are used by your application on the whole. So it is a good reason to share the .env file with other developers in your team, but keep all the sensitive data on your own (or production) machine locally in the .env*.local files.

It is not necessary, but also a good practice to use NODE_ENV to control the environment to run your application in. And if you follow this practice you can keep the NODE_ENV-specific defaults in your .env.development, .env.test, .env.production files sharing them with your team as well. Any NODE_ENV-specific .env.* file's values can also be overwritten in the appropriate .env.*.local file (i.e. .env.development.local, .env.test.local, .env.production.local).

Summarizing the above, you can have the following .env* files in your project:

• .env – for default (fallback) values, tracked by VCS
• .env.development – for development environment, tracked by VCS
• .env.test – for test environment, tracked by VCS
• .env.production – for production environment, tracked by VCS
• .env.local – for individual default values, ignored by VCS
• .env.development.local – for individual development environment values, ignored by VCS
• .env.test.local – for individual test environment values, ignored by VCS
• .env.production.local – for production environment values (DB passwords, API keys, etc.), ignored by VCS

Note that .env.* file names may vary in your project depending on your own needs/preferences, just keep in mind that .env*.local files should be untracked (ignored) by your version control system.

Here is an example of the .gitignore (or .hgignore) file entry to keep it clear:

# local .env* files
.env.local
.env.*.local

Variables overwriting/priority

Since multiple .env* files are loaded simultaneously, all the variables defined in these files are merged in the following order:

1. The .env file has the lowest priority. Keep the most default (fallback) values there;
2. The .env.local file has a priority over the .env. Create it if you want to overwrite the default values for your own environment-specific needs;
3. NODE_ENV-specific env files (like .env.development, .env.test, etc.) have a priority over the default .env and .env.local files. Keep NODE_ENV-specific environment variables there;
4. NODE_ENV-specific local env files (.env.development.local, .env.production.local, etc.) have the highest priority over all the env files. As with .env.local, create them only if you need to overwrite NODE_ENV-specific values for your own environment-specific needs;
5. Environment variables that are already set will not be overwritten, that means that the command line variables have a higher priority over all those defined in env files;

Alternative defaults: .env.defaults

In addition to .env, you may also use .env.defaults to store default (fallback) values.

This may come handy e.g. when migrating from dotenv (where it is strongly advised against committing .env file to VCS) and you already have .env file used to store your local values.

In such case, you may prefer to keep using your existing .env (ignored by VCS) as your local config and create additional .env.defaults (tracked by VCS) file which will be loaded before .env.

Then at every place .env is mentioned in the docs, read it as: ".env.defaults first, then .env".

dotenv-flow/config options

When preloading dotenv-flow using the node's -r switch you can use the following configuration options:

Environment variables

• NODE_ENV => options.node_env;
• DEFAULT_NODE_ENV => options.default_node_env;
• DOTENV_FLOW_PATH => options.path;
• DOTENV_FLOW_ENCODING => options.encoding;
• DOTENV_FLOW_PURGE_DOTENV => options.purge_dotenv;
• DOTENV_FLOW_SILENT => options.silent;

$ NODE_ENV=production DOTENV_FLOW_PATH=/path/to/env-files-dir node -r dotenv-flow/config your_script.js

Command line switches

• --node-env => options.node_env;
• --default-node-env => options.default_node_env;
• --dotenv-flow-path => options.path;
• --dotenv-flow-encoding => options.encoding;
• --dotenv-flow-purge-dotenv => options.purge_dotenv;
• --dotenv-flow-silent => options.silent;

Don't forget to separate dotenv-flow/config-specific CLI switches with -- because they are not recognized by Node.js:

$ node -r dotenv-flow/config your_script.js -- --dotenv-flow-encoding=latin1 --dotenv-flow-path=...

API reference

.config([options]) => object

The main entry point function that parses the contents of your .env* files, merges the results and appends to process.env.*.

Also, like the original module (dotenv), it returns an object with the parsed property containing the resulting key/values or the error property if the initialization is failed.

options.node_env

Type: string

Default: process.env.NODE_ENV

With the node_env option you can force the module to use your custom environment value independent of process.env.NODE_ENV:

require('dotenv-flow').config({
  node_env: process.argv[2] || 'development'
});

options.default_node_env

Type: string

Default: undefined

If the NODE_ENV environment variable is not set, the module doesn't load/parse any NODE_ENV-specific files at all. Therefore, you may want to use "development" as a default environment, like:

require('dotenv-flow').config({
  default_node_env: 'development'
});

To be clear, just make a note that all the following initialization examples are also equivalent:

process.env.NODE_ENV = process.env.NODE_ENV || 'development';

require('dotenv-flow').config();

require('dotenv-flow').config({
  node_env: process.env.NODE_ENV || 'development'
});

require('dotenv-flow').config({
  node_env: process.env.NODE_ENV,
  default_node_env: 'development'
});

All the examples above, considers the value of process.env.NODE_ENV at first, and if it is not set, uses "development" as the value by default. You can just choose one that looks prettier for you.

options.path

Type: string

Default: process.cwd() (current working directory)

With the path initialization option you can specify a path to .env* files directory:

require('dotenv-flow').config({
  path: '/path/to/env-files-dir'
});

If the option is not provided, the current working directory is used.

options.encoding

Type: string

Default: "utf8"

You can specify the encoding for reading your files containing environment variables.

require('dotenv-flow').config({
  encoding: 'base64'
});

options.purge_dotenv

Type: boolean

Default: false

In some cases the original "dotenv" library can be used by one of the dependent npm modules. It causes calling the original dotenv.config() that loads the .env file from your project before you can call dotenv-flow.config().

Such cases breaks .env* files priority because the previously loaded environment variables are treated as shell-defined thus having a higher priority.

Setting the purge_dotenv option to true can gracefully fix this issue.

require('dotenv-flow').config({
  purge_dotenv: true
});

options.silent

Type: boolean

Default: false

With this option you can suppress all the console outputs except errors and deprecation warnings.

require('dotenv-flow').config({
  silent: true
});

---

The following API considered as internal, but it is also exposed to give the ability to be used programmatically by your own needs.

.listDotenvFiles(dirname, [options]) => string[]

Returns a list of .env* filenames depending on the given options.node_env. The resulting list is ordered by the env files priority from lowest to highest.

Also, note that the .env.local file will not be listed for NODE_ENV="test", since normally you expect tests to produce the same results for everyone.

Parameters:

dirname

Type: string

A path to .env* files' directory.

[options.node_env]

Type: string

Default: undefined

The node environment (development/test/production/etc,).

Returns:

Type: string[]

A list of .env* filenames.

Example:

const dotenvFlow = require('dotenv-flow');

const filenames = dotenvFlow.listDotenvFiles('/path/to/project', { node_env: 'development' });

console.log(filenames); // will output the following:
// > [ '/path/to/project/.env',
// >   '/path/to/project/.env.local',
// >   '/path/to/project/.env.development',
// >   '/path/to/project/.env.development.local' ]

.parse(filenames, [options]) => object

Parses the content of a given file(s) to use the result programmatically. Accepts a filename or a list of filenames and returns a map of the parsed key/values as an object.

When several filenames are given, the parsed variables are merged into a single object using the "overwrite" strategy.

Parameters:

filenames

Type: string|string[]

A filename or a list of filenames to parse.

[options.encoding]

Type: string

Default: "utf8"

An optional encoding for reading files.

Returns:

Type: object

The resulting map of { env_var: value } as an object.

Example:

# .env

FOO=bar
BAZ=bar

# .env.local

BAZ=qux

const dotenvFlow = require('dotenv-flow');

const variables = dotenvFlow.parse([
  '/path/to/project/.env',
  '/path/to/project/.env.local'
]);

console.log(typeof variables, variables); // > object { FOO: 'bar', BAZ: 'qux' }

.load(filenames, [options]) => object

Loads variables defined in a given file(s) into process.env.

When several filenames are given, parsed environment variables are merged using the "overwrite" strategy since it utilizes .parse() for doing this. But eventually, assigning the parsed environment variables to process.env is done using the "append" strategy, thus giving a higher priority to the environment variables predefined by the shell.

Parameters:

filenames

Type: string|string[]

A filename or a list of filenames to load.

[options.encoding]

Type: string

Default: "utf8"

An optional encoding for reading files.

[options.silent]

Type: boolean

Default: false

Suppress all the console outputs except errors and deprecation warnings.

Returns:

Type: object

The returning object have the same shape as the .config()'s, it will contain the parsed property with a parsed content of a given file(s) or the error property if the parsing is failed.

Example:

# .env

FOO=bar
BAZ=bar

# .env.local

BAZ=qux

const dotenvFlow = require('dotenv-flow');

process.env.BAZ = 'Yay!';

const result = dotenvFlow.load([
  '/path/to/project/.env',
  '/path/to/project/.env.local'
]);

console.log(typeof result, result); // > object { parsed: { FOO: 'bar', BAZ: 'qux' } }

console.log(process.env.FOO); // > 'bar'
console.log(process.env.BAZ); // > 'Yay!'

.unload(filenames, [options]) => void

Unloads variables defined in a given file(s) from process.env.

The environment variables that are predefined (i.e. by the shell) will not be unloaded.

Parameters:

filenames

Type: string|string[]

A filename or a list of filenames to unload.

[options.encoding]

Type: string

Default: "utf8"

An optional encoding for reading files.

Example:

# .env

FOO=bar
BAZ=bar

# .env.local

BAZ=qux

const dotenvFlow = require('dotenv-flow');

process.env.BAZ = 'Yay!';

dotenvFlow.load([
  '/path/to/project/.env',
  '/path/to/project/.env.local'
]);

console.log(process.env.FOO); // > 'bar'
console.log(process.env.BAZ); // > 'Yay!'

dotenvFlow.unload([
  '/path/to/project/.env',
  '/path/to/project/.env.local'
]);

console.log(process.env.FOO); // > undefined
console.log(process.env.BAZ); // > 'Yay!'

---

Contributing

Feel free to dive in! Open an issue or submit PRs.

Running tests

Using NPM:

$ npm test

Using Yarn:

$ yarn test

License

Licensed under MIT © 2018-2020 Dan Kerimdzhanov