Dotvault for WordPress

Dotvault for WordPress projects.

Classic WordPress keeps its credentials in wp-config.php. Bedrock and most Docker setups move them into a .env instead, which is a much better idea and also means eight salt values and a full database credential set now live in a file you should be careful with. Dotvault recognises all of them and gives you version history over the lot.

What you get

  • Detects WordPress from wp-config.php in the project root, rather than from a package manifest.
  • Recognises the required database set, DB_NAME, DB_USER, DB_PASSWORD and DB_HOST, and flags any that are missing.
  • Knows all eight WordPress salts, AUTH_KEY through NONCE_SALT, so a half-rotated set is obvious.
  • Recognises WP_HOME, WP_SITEURL and the WP_DEBUG family, which are the ones you least want set wrong in production.

Known environment variables

Dotvault recognises these variables when you open a WordPress project and surfaces helpful descriptions and warnings in the editor. WordPress is detected via wp-config.php in the project root.

  • DB_NAMERequired

    Database name

  • DB_USERRequired

    Database username

  • DB_PASSWORDRequired

    Database password

  • DB_HOSTRequired

    Database host

  • DB_PREFIX

    Database table prefix

  • WP_ENV

    WordPress environment

  • WP_HOME

    Home URL

  • WP_SITEURL

    Site URL

  • WP_DEBUG

    Enable WordPress debug mode

  • WP_DEBUG_LOG

    Write debug output to log file

  • WP_DEBUG_DISPLAY

    Display debug errors on screen

  • WP_CACHE

    Enable advanced caching

  • DISABLE_WP_CRON

    Disable WP-Cron (use real cron instead)

  • WP_POST_REVISIONS

    Max number of post revisions to keep

  • AUTOSAVE_INTERVAL

    Autosave interval in seconds

  • AUTH_KEY

    WordPress authentication salt key

  • SECURE_AUTH_KEY

    WordPress secure auth salt key

  • LOGGED_IN_KEY

    WordPress logged-in salt key

  • NONCE_KEY

    WordPress nonce salt key

  • AUTH_SALT

    WordPress auth salt

  • SECURE_AUTH_SALT

    WordPress secure auth salt

  • LOGGED_IN_SALT

    WordPress logged-in salt

  • NONCE_SALT

    WordPress nonce salt

Official WordPress docs: developer.wordpress.org