I always thought highly of the approach used by https://www.npmjs.com/package/@strong-config/node

Does dotenvx support secrets managers?