HELP & GUIDES

Environment Variables & Cryptographic Secrets

Home
Guides
RUNTIME SECRETS MANAGEMENT

Secure Ingestion & 256-Bit Fernet Encryption

Cloudilio encrypts credentials, database URIs, and third-party tokens at rest using symmetric 256-bit Fernet keys. The platform decrypts values only in memory when spawning container processes.

Adding Variables in the Control Panel

Open the Environment tab on any application. Enter the variable key in uppercase format along with the plaintext secret. Cloudilio stores the ciphertext in the database.

AUTOMATIC RUNTIME INJECTION
The container agent reads your encrypted keys, decodes the secrets, and passes them to the Python process as standard os.environ variables.
REVISION SAFETY
Altering environment variables triggers a prompt to deploy a new revision. Existing containers keep their original values until you deploy the update.

Bulk Importing .env Files

Developers can import existing environment files with a single operation. Click Bulk Import .env in the environment view and paste standard configuration text:

# Paste this format into the bulk importer
DEBUG=False
SECRET_KEY=9f83ac01bc8e4112
DATABASE_URL=sqlite:////app/data/app.db
STRIPE_API_KEY=sk_live_51M0...
The parser automatically skips comments starting with #, trims whitespace, and strips wrapping quotation marks.

Reading Variables in Python Code

Use standard library methods to access injected variables:

import os
api_key = os.environ.get("STRIPE_API_KEY")
debug_mode = os.environ.get("DEBUG", "False").lower() == "true"