.env files were fine until migrations, rotations, Kubernetes, OIDC, and app sprawl turned them into a liability. Original work date June The problem At small scale, .env files felt good enough. Then the environment grew. Apps moved hosts. Docker gave way to k3s. OIDC secrets regenerated. Databases stayed external. App configs needed to be restored, moved, and updated. … Continue reading Secrets Are Not Configuration