iridiumintel/rapidenv-php

General PHP client for RapidEnv secure secrets manager

v0.0.1 2025-09-11 20:35 UTC

Requires

• php: ^8.1|^8.2|^8.3
• ext-sodium: *
• guzzlehttp/guzzle: ^7.9

MIT

• Ognjen Cvetković

README

RapidEnv is a next-gen replacement for .env files — a secure, distributed, and simple way to store and fetch secrets.

This package (rapidenv-php) is a general PHP client that can be used in any project (Laravel, Symfony, WordPress, CLI...).

🚀 Installation

composer require rapidenv/rapidenv-php

⚡ Quick Start

<?php
require 'vendor/autoload.php';

use RapidEnv\Config;
use RapidEnv\Client;
use RapidEnv\EnvStore;

$EnvStore = new \RapidEnv\EnvStore(
    new \RapidEnv\Client(
        new \RapidEnv\Config(
            endpoint: env('RAPIDENV_ENDPOINT'),
            projectId: env('RAPIDENV_PROJECT_ID'),
            environmentId: env('RAPIDENV_ENVIRONMENT_ID'),
            clientId: env('RAPIDENV_CLIENT_ID'),
            publicKey: env('RAPIDENV_PUB'),
            privateKey: env('RAPIDENV_PRIV'),
        )
    )
);

echo $EnvStore['DB_PASSWORD'];   // array-like access

🔑 How It Works

• SaaS / self-host backend securely stores encrypted secrets.
• Client signs requests and fetches bundles of variables.
• In-memory cache: values are cached in RAM (default TTL = 15 min).
• ETag: backend skips sending data if nothing changed (304 Not Modified).
• No disk writes: secrets are never stored on disk.

📦 Integrations

• Laravel wrapper → rapidenv-laravel (coming soon)
• Symfony bundle (coming soon)
• WordPress plugin (coming soon)

🛡️ Security

• 🔐 Ed25519 request signing
• 🛡️ Secrets only in memory
• ⚡ End-to-end encryption (AES-GCM + TLS)
• 🔄 Transparent cache + rotation without redeploys