doppler

Use doppler to fetch secrets. Requires DOPPLER_TOKEN env var (service token scoped to project).

Setup

1. Create project in Doppler dashboard
2. Add secrets (GEMINI_API_KEY, BREX_TOKEN, etc.)
3. Generate service token for project/config
4. Set DOPPLER_TOKEN on server

Common commands

Get a single secret:

doppler secrets get GEMINI_API_KEY --plain

List all secrets (names only):

doppler secrets --only-names

List secrets with values:

doppler secrets

Run a command with secrets injected:

doppler run -- some-command

Download secrets as JSON:

doppler secrets download --no-file --format json

Notes

• Service tokens are scoped to a single project + config (e.g., dev, prod)
• --plain strips quotes/newlines for scripting
• Never log or echo secret values
• Prefer doppler secrets get <NAME> --plain for single secrets