Environment Variables

Set environment variables from Mission Control → Environment Variables — that field is write-only, so the value is never shown again after you save it. If your ZIP includes a .env file, moonbase applies its non-secret values automatically; anything shaped like a real credential (API key, token, password, database URL) is never auto-applied, even from a shipped .env — you'll be prompted to set it through this same UI instead.

During upload, you can drag your .env file directly into the consent dialog to auto-fill all your variables. Platform-managed keys (MOONBASE_*) are handled automatically.

Values are write-only — they are never visible in the moonbase UI again after being set, only the key names are shown. Values are stored encrypted at rest (AES-256-GCM). Do not commit real secrets to your repository.