Pull & Push

Synchronize secrets between WindKeep and local .env files. Pull downloads secrets to a file, while push uploads secrets from a file to WindKeep.

Understanding Pull & Push

When to Use Pull

  • Setting up a new development environment
  • Creating backup files of your secrets
  • Working with tools that require .env files
  • Sharing environment-specific configurations with team members

When to Use Push

  • Migrating from .env files to WindKeep
  • Bulk importing secrets from another source
  • Synchronizing local changes to WindKeep

Important Notes

  • Pull and push operations work with your active project
  • Files are in standard .env format: KEY=value
  • Default file is .env if no file is specified
  • Default environment is development if not specified

Command Reference

windkeep pull [OUTPUT_FILE]

Pull secrets from your active project in WindKeep and save to a local file.

Arguments:

  • OUTPUT_FILE - File to save secrets to (optional, default: .env)

Flags:

  • -e, --env - Environment to pull (dev/development, staging, prod/production) - default: development

Examples:

# Pull development secrets to .env
windkeep pull

# Pull production secrets to custom file
windkeep pull prod.env -e production

windkeep push [INPUT_FILE]

Push secrets from a local file to your active project.

Arguments:

  • INPUT_FILE - File to read secrets from (optional, default: .env)

Flags:

  • -e, --env - Environment to push to (dev/development, staging, prod/production) - default: development

Examples:

# Push .env file to development environment
windkeep push

# Push custom file to production environment
windkeep push prod.env -e production

Notes:

  • Existing secrets with the same key will not be overwritten
  • Invalid or duplicate secrets will be skipped with a warning
  • Blank lines and comments (starting with #) are ignored in the input file

Use Cases

Local Development

# Pull development secrets to .env for your app
windkeep pull
npm run dev  # Your app reads from .env

Backup Secrets

windkeep pull backup-$(date +%Y%m%d).env

Migrate Between Projects

# Pull from source project
windkeep projects switch source-project

# Push to destination project
windkeep projects switch destination-project

Share Environment-Specific Secrets

# Pull production secrets for deployment
windkeep pull prod.env -e production

# Team member pushes to their production environment
windkeep push prod.env -e production

Security Considerations

  • Pulled files contain plaintext secrets - store them securely
  • Never commit secret files to version control
  • Consider encrypting pulled files before sharing