.env & Secrets.

If it's in git, assume it's public. If it's public, it's burned.

launching spring 2026

$24.99

· 18" × 24" · matte giclée · 300 DPI

Notify me when live → Back to catalog

✓The one .gitignore line that saves you.

✓.env.example pattern for teammates.

✓Server secret vs public · what gets bundled.

✓Rotation procedure · when to panic.

18" × 24"

poster size

Matte giclée

archival print

300 DPI

dark theme

§ the full brief

Your API keys, DB passwords, and tokens — and the one-commit mistake that leaks them to the world forever.

Vibe edition

The basics of secret hygiene on one wall. What a .env file is. The .gitignore line to add on day one. The .env.example pattern. Why NEXT_PUBLIC_* is a trap for API keys. Production secret stores. And the exact rotation procedure for when you leak a key.

GitHub scans

Pushes with API keys are auto-detected and emailed to you. Bots scrape public repos within minutes of a commit. Rotate immediately — the poster has the steps.

The details

18" × 24" matte giclée print, 300 DPI. Dark theme.

Part of the quux Vibe poster series. quux.shop

.env & Secrets.

More from the vibe line

First drop, first in line.