README

A simple, yet powerful .env file editor plugin for your Filament Panels.

Manage your current .env variables straight from the admin panel, with a handy backup functionality page to keep your environment safe.

What this package does

View and manage .env variables directly from your Filament panel, without ever touching the server.
Create, edit, and delete keys and change their values through a graphical interface.
Full backup of the current .env file and saved, restorable backups.
Restore any backup in one click to roll your environment back to a previous state.
Download and upload backups to keep or import copies locally.
Hide sensitive keys (such as APP_KEY) so they never appear in the interface.
Smart security audit with a live score, warning and critical findings, and actionable suggestions before you go live.
Mask sensitive values by default and reveal them for specific keys only.
Protect harmful modifications — critical keys can not be emptied or deleted, dangerous values are blocked at the door, and AWS_*-style wildcards can be protected.
Flexible customization of navigation, the page, and access control through plugin configuration.
Compatible with Filament 5 and Laravel 12/13.

Requirements

Component	Version
PHP	`^8.2`
Laravel	`^12.0 \| ^13.0`
Filament	`~5.0`

Installation

You can install the package via composer:

composer require arabicsooq/filament-env-editor

Usage

Add the ArabicSooq\FilamentEnvEditor\FilamentEnvEditorPlugin to your panel config.

use ArabicSooq\FilamentEnvEditor\FilamentEnvEditorPlugin;

class AdminPanelProvider extends PanelProvider
{
    public function panel(Panel $panel): Panel
    {
        return $panel
            // ...
            ->plugin(
                FilamentEnvEditorPlugin::make()
            );
    }
}

Configuration

Customizing the navigation item

FilamentEnvEditorPlugin::make()
    ->navigationGroup('System Tools')
    ->navigationLabel('My Env')
    ->navigationIcon('heroicon-o-cog-8-tooth')
    ->navigationSort(1)
    ->slug('env-editor')

Hiding keys

Some keys may be considered particularly sensitive and you may not wish to expose them, even through this package. You can hide them through this interface:

FilamentEnvEditorPlugin::make()
    ->hideKeys('APP_KEY', 'BCRYPT_ROUNDS')

Revealing masked sensitive values

Sensitive values (passwords, secrets, tokens) are masked in the interface by default. To show a few of them unmasked, allowlist them:

FilamentEnvEditorPlugin::make()
    ->revealKeys('MAIL_PASSWORD', 'SOME_TOKEN')

Protecting keys from deletion

Critical framework keys (APP_KEY, APP_ENV) can never be emptied or deleted. You can protect additional keys — wildcard prefixes are supported:

FilamentEnvEditorPlugin::make()
    ->protectKeys('AWS_SECRET', 'MAIL_*')

The plugin also blocks values that look like shell commands or contain unsafe characters.

Security audit tab

A dedicated Security tab scores the current .env file (0–100) and lists findings (empty secrets, weak passwords, HTTP/localhost URLs in production, debug mode enabled, an invalid APP_KEY, local mail drivers in production...) with suggestions. It is enabled by default and can be turned off:

FilamentEnvEditorPlugin::make()
    ->securityScan(false)

You can also pass a closure to evaluate the setting dynamically:

FilamentEnvEditorPlugin::make()
    ->securityScan(fn () => app()->environment('local'))

Authorization

If you would like to prevent certain users from accessing the env-editor page, add an authorize callback to the plugin chain:

FilamentEnvEditorPlugin::make()
    ->authorize(
        fn () => auth()->user()->isAdmin()
    )

Customizing the env-editor page

To customize the page, extend the ArabicSooq\FilamentEnvEditor\Pages\ViewEnv page and override its methods:

use ArabicSooq\FilamentEnvEditor\Pages\ViewEnv as BaseViewEnvEditor;

class ViewEnv extends BaseViewEnvEditor
{
    // Your implementation
}

use App\Filament\Pages\ViewEnv;

FilamentEnvEditorPlugin::make()
    ->viewPage(ViewEnv::class)

Testing

composer install
composer test        # Runs PHPUnit
composer phpstan     # Static analysis (PHPStan)
composer cs          # Code style (PHP-CS-Fixer)

Contributing

Please see CONTRIBUTING for details.

License

The MIT License (MIT). Please see License File for more information.

arabicsooq / filament-env-editor

Package info

Security

Fund package maintenance!

Statistics