# Env vars

Env vars are the settings an app gets, like `DATABASE_URL`. dudbox keeps them encrypted. A secret one is hidden in lists and masked in build logs.

The app gets a change on its next deploy: after you set or delete env vars, call `POST .../redeploy` once (see [Deployments](/docs/api/deployments.md)).

The examples use `API=https://dudbox.com/api/v1` and `AUTH="Authorization: Bearer $DUDBOX_TOKEN"`.

### `GET /api/v1/services/{project}/{service}/env`

All env vars of a service. Secret values are `null` here.

```json
{
  "env": [
    { "key": "LOG_LEVEL", "value": "info", "secret": false },
    { "key": "DATABASE_URL", "value": null, "secret": true }
  ]
}
```

### `GET /api/v1/services/{project}/{service}/env/{key}`

One env var with its real value, also a secret one. dudbox logs each read of a value, with the token that read it.

```sh
curl -s $API/services/acme/shop/env/DATABASE_URL -H "$AUTH"
```

```json
{ "key": "DATABASE_URL", "value": "postgres://…", "secret": true }
```

### `PUT /api/v1/services/{project}/{service}/env/{key}`

Makes or changes an env var. `secret` is `false` if you leave it out. A name has letters, digits and `_`, and does not start with a digit. A value is at most 32 KB.

```sh
curl -s -X PUT $API/services/acme/shop/env/DATABASE_URL -H "$AUTH" -H 'content-type: application/json' \
  -d '{"value": "postgres://…", "secret": true}'
```

Answer: `200` with the env var (`value` is `null` for a secret).

### `DELETE /api/v1/services/{project}/{service}/env/{key}`

Deletes an env var. Answer: `204`, no body. A name that is not there gets `404`.