Hey, hackers!
For the last couple of months, I've been building envsecrets.com. It's been a devastating journey. I'm pretty good on the product but suck at the business side of things.
I've failed at marketing and outreach, and even considered putting this tool up for sale.
envsecrets.com is an open-source end-to-end encrypted platform to manage your environment secrets.
Small teams might not be interested because you have high intra-organisational trust when copy-pasting secrets over Slack/WhatsApp.
Super large teams might also not be interested because of strict compliance requirements.
But if you are a dev shop, or a mid-sized team (15-40 devs), I would highly recommend you check out this tool. It will streamline your secrets management and I've even kept the pricing low for the early users.
Dev shops are a very good target audience because they have to manage tons of secrets of all of their client projects.
Let me know your reviews of envsecrets.com ❤️
I think SEO is as good as dead with the bullshitGPT
I have a reveal your website email address tool for free too veilmail.io and Google don't know
Put it on your site if you are not boring.
Interesting. Impressions:
envsto wrap around other commands feels backwards. I'm not sure why, but I'd rather run my normal Docker/npm/etc commands and have this hook into them...Eventually you'll need to move out of .env.local. When you need to share the secrets with other developers and across environments. You might need to copy-paste at that time.
Can you elaborate on your second point a bit more? You can actually hook the envs CLI into docker build.
Hey wahal. I think I wasn't clear about my point 1. What I was trying to ask was, "Is it more important to talk about .env.local instead of .env, in your copy?"
Re #2, I guess calling
envs docker,envs npm, etc is putting too much emphasis IMO on a small piece (secrets) of the whole pie. If other tools did that, I would be concerned if they composed together well. I guess I would be more interested in something less intrusive (or less intrusive-seeming, anyway.)It's an interesting idea and pretty good website copy
The issue is you might need more specific use case
So the core is that secrets shouldn't need to be shared on a perfect world, so the question is in what world do we actually use this? I know there are always temp long term situations around where no one is putting the resources to do it properly so you do share these secrets
So as focusing on the customer niche you want people who care but not enough to do it correctly. So maybe you should be targeting security people
Or the other side is like integrating bootstrapping tools as a way to defend default generated creds and such
Or integrate to where people should be storing these as password vaults and offer better org key rotations or something
You have to know not just the problem but the person using it, it's workflow and situations to be effective at marketing
I help few early OSS projects probono on distribution/ visibility. Do dm if you feel you need help. The website looks good though, and seeing the product development, it doesn't feel you had a devastating journey. Looks like an over reaction for visibility.
Hey, thanks - Sent you a linkedin request <3
That is exactly what I've been looking for since hashicorp vault is paid, good job man, will give it a shot
Hey, thanks a lot! Can't wait to hear your reviews after using it.
How many developers are you in your team?
Just me actually 😂 Am I correct that your app is some kind of alternative to vault?
You are. Vault is super expensive for small teams. And access permissions have to be manually setup. envsecrets makes it a breeze.
Please feel free to reach out to me directly in case you get stuck anywhere.
Great. Though I am not sure if am going to use it anytime soon, just because I have nothing to deploy yet, but will try it as soon as possible.
But the main concern here would be, not for me, but for anyone who has a team bigger than 1 person and higher stakes - how do you store those secrets if you do store them at all?
I understand your frustration sometimes people think building a product is everything that is needed but it only a half a journey! Consider doing some testimonials and addressing how you are overcoming the pain points
Yes, I learnt this the hard way.
Honestly, I'm certain there's demand. I have had a few sales successes. I'm just lacking the consistency in outreach and scheduling demo calls.
Tried working with a few hot-shots MBAs as my business cofounders. But it didn't work out.
Being bootstrapped also decelerates me.
Yes, this is a devtool I will use. Its robust features and user-friendly interface make it a valuable asset for development tasks. The tool's efficiency in debugging, profiling, and optimizing code aligns with my project requirements. Its compatibility with various programming languages and frameworks enhances its versatility, ensuring it meets diverse development needs. Overall, incorporating this devtool into my workflow promises to streamline the development process and improve overall productivity.
Is this AI generated?
Looks like it. I'm not responding lol.