bvallelunga

Doppler | San Francisco, CA or Remote | Onsite | Remote OK | https://doppler.com

Doppler is the easiest way to securely manage all your environment variables in one place. No more sharing secrets over Slack, copying .env files, or home-brewed solutions. Set up your development, staging, and production environments in minutes with integrations for every cloud provider. Doppler allows you to easily manage all your projects and your team's access to secrets.

To learn more about who we are, our engineering culture, and whether this is the right place for you, read our Key Values profile: https://www.keyvalues.com/doppler

Here are our open roles:

* Senior Full Stack Engineer: https://jobs.lever.co/doppler/f293d858-c3cb-4c1b-b856-b39ed3...

* Senior Full Stack Engineer (Ecosystem): https://jobs.lever.co/doppler/06df9811-541e-483d-9abe-be01b1...

* Site Reliability Engineer (SRE): https://jobs.lever.co/doppler/3598c272-5b4b-4553-a10c-669c7b...

* Developer Advocate - Community: https://jobs.lever.co/doppler/f4ec40b5-0016-487e-b511-35e509...

* Lead Product Designer: https://jobs.lever.co/doppler/ee2ead9f-dcb9-4d47-8c2f-4ab3b9...

* Sr. Technical Content Marketer/Editor: https://jobs.lever.co/doppler/b6fc5136-0346-4b25-ba70-96e46e...

Tech Stack: Node.js & Express backend, Golang CLI, Postgres database, Google Cloud

Doppler | San Francisco, CA or Remote | Onsite | Remote OK | https://doppler.com

Doppler is the easiest way to securely manage all your environment variables in one place. No more sharing secrets over Slack, copying .env files, or home-brewed solutions. Set up your development, staging, and production environments in minutes with integrations for every cloud provider. Doppler allows you to easily manage all your projects and your team's access to secrets.

To learn more about who we are, our engineering culture, and whether this is the right place for you, read our Key Values profile: https://www.keyvalues.com/doppler

Here are our open roles:

* Senior Full Stack Engineer: https://jobs.lever.co/doppler/f293d858-c3cb-4c1b-b856-b39ed3...

* Site Reliability Engineer (SRE): https://jobs.lever.co/doppler/3598c272-5b4b-4553-a10c-669c7b...

* Developer Relations: Content Engine: https://jobs.lever.co/doppler/73803372-67ce-4185-b6bd-72558c...

* Lead Product Designer: https://jobs.lever.co/doppler/ee2ead9f-dcb9-4d47-8c2f-4ab3b9...

Tech Stack: Node.js & Express backend, Golang CLI, Postgres database, Google Cloud

Doppler | San Francisco, CA or Remote | Onsite | Remote OK | https://doppler.com

Doppler is the easiest way to securely manage all your environment variables in one place. No more sharing secrets over Slack, copying .env files, or home-brewed solutions. Set up your development, staging, and production environments in minutes with integrations for every cloud provider. Doppler allows you to easily manage all your projects and your team's access to secrets.

To learn more about who we are, our engineering culture, and whether this is the right place for you, read our Key Values profile: https://www.keyvalues.com/doppler

Here are our open roles:

* Senior Data Engineer: https://jobs.lever.co/doppler/b7abf249-61ce-4b01-96f8-d0937e...

* Senior Full Stack Engineer: https://jobs.lever.co/doppler/f293d858-c3cb-4c1b-b856-b39ed3...

* Site Reliability Engineer (SRE): https://jobs.lever.co/doppler/3598c272-5b4b-4553-a10c-669c7b...

* Product Manager (Growth): https://jobs.lever.co/doppler/1213c1f3-b39a-41de-9c01-530680...

* Lead Product Designer: https://jobs.lever.co/doppler/ee2ead9f-dcb9-4d47-8c2f-4ab3b9...

Tech Stack: Node.js & Express backend, Golang CLI, Postgres database, Google Cloud

Doppler | San Francisco, CA or Remote | Onsite | Remote OK | https://doppler.com

Doppler is the easiest way to securely manage all your environment variables in one place. No more sharing secrets over Slack, copying .env files, or home-brewed solutions. Set up your development, staging, and production environments in minutes with integrations for every cloud provider. Doppler allows you to easily manage all your projects and your team's access to secrets.

To learn more about who we are, our engineering culture, and whether this is the right place for you, read our Key Values profile: https://www.keyvalues.com/doppler

Here are our open roles:

- Senior Data Engineer: https://jobs.lever.co/doppler/b7abf249-61ce-4b01-96f8-d0937e...

- Senior Full Stack Engineer: https://jobs.lever.co/doppler/f293d858-c3cb-4c1b-b856-b39ed3...

- Site Reliability Engineer (SRE): https://jobs.lever.co/doppler/3598c272-5b4b-4553-a10c-669c7b...

- Product Manager (Growth): https://jobs.lever.co/doppler/1213c1f3-b39a-41de-9c01-530680...

- Lead Product Designer: https://jobs.lever.co/doppler/ee2ead9f-dcb9-4d47-8c2f-4ab3b9...

Tech Stack: Node.js & Express backend, Golang CLI, Postgres database, Google Cloud

Doppler | San Francisco, CA or Remote | Onsite | Remote OK | https://doppler.com

Doppler is the easiest way to securely manage all your environment variables in one place. No more sharing secrets over Slack, copying .env files, or home-brewed solutions. Set up your development, staging, and production environments in minutes with integrations for every cloud provider. Doppler allows you to easily manage all your projects and your team's access to secrets.

To learn more about who we are, our engineering culture, and whether this is the right place for you, read our Key Values profile: https://www.keyvalues.com/doppler

Here are our open roles:

- Lead Product Designer: https://jobs.lever.co/doppler/cf84928c-4643-499f-ac15-4c4119...

- Senior Full Stack Engineer: https://jobs.lever.co/doppler/f293d858-c3cb-4c1b-b856-b39ed3...

- Senior Growth Marketer: https://jobs.lever.co/doppler/f69ab993-9e63-455d-9de0-4696f7...

Tech Stack: Node.js & Express backend, Golang CLI, Postgres database, Google Cloud

Doppler | San Francisco, CA or Remote | Onsite or Remote OK | https://doppler.com

Doppler is the easiest way to securely manage all your environment variables in one place. No more sharing secrets over Slack, copying .env files, or home-brewed solutions. Set up your development, staging, and production environments in minutes with integrations for every cloud provider. Doppler allows you to easily manage all your projects and your team's access to secrets.

To learn more about who we are, our engineering culture, and whether this is the right place for you, read our Key Values profile: https://www.keyvalues.com/doppler

Here are our open roles:

* Lead Application Security Engineer: https://jobs.lever.co/doppler/63e3511b-5463-4d02-a1f9-0bc463...

* Lead DevSecOps Engineer: https://jobs.lever.co/doppler/edd33dbd-ddb5-4abe-bd02-cdde0f...

* Senior Fullstack Software Engineer: https://jobs.lever.co/doppler/f293d858-c3cb-4c1b-b856-b39ed3...

Tech Stack: Node.js & Express backend, Golang CLI, Postgres database, Google Cloud

Doppler | San Francisco, CA or Remote | Onsite or Remote OK | https://doppler.com

Doppler is the easiest way to securely manage all your environment variables in one place. No more sharing secrets over Slack, copying .env files, or home-brewed solutions. Set up your development, staging, and production environments in minutes with integrations for every cloud provider. Doppler allows you to easily manage all your projects and your team's access to secrets.

To learn more about who we are, our engineering culture, and whether this is the right place for you, read our Key Values profile: https://www.keyvalues.com/doppler

Here are our open roles:

* Lead Application Security Engineer: https://jobs.lever.co/doppler/63e3511b-5463-4d02-a1f9-0bc463...

* Lead DevSecOps Engineer: https://jobs.lever.co/doppler/edd33dbd-ddb5-4abe-bd02-cdde0f...

* Senior Fullstack Software Engineer: https://jobs.lever.co/doppler/f293d858-c3cb-4c1b-b856-b39ed3...

Tech Stack: Node.js & Express backend, Golang CLI, Postgres database, Google Cloud

Doppler | San Francisco, CA or Remote | Onsite or Remote OK | https://doppler.com

Doppler is the easiest way to securely manage all your environment variables in one place. No more sharing secrets over Slack, copying .env files, or home-brewed solutions. Set up your development, staging, and production environments in minutes with integrations for every cloud provider. Doppler allows you to easily manage all your projects and your team's access to secrets.

To learn more about who we are, our engineering culture, and whether this is the right place for you, read our Key Values profile: https://www.keyvalues.com/doppler

Here are our open roles:

* Engineering Manager: https://jobs.lever.co/doppler/f82b8218-0e9a-4bce-9ebb-498d58...

* Lead Application Security Engineer: https://jobs.lever.co/doppler/63e3511b-5463-4d02-a1f9-0bc463...

* Senior DevSecOps Engineer: https://jobs.lever.co/doppler/edd33dbd-ddb5-4abe-bd02-cdde0f...

* Senior Fullstack Software Engineer: https://jobs.lever.co/doppler/f293d858-c3cb-4c1b-b856-b39ed3...

Tech Stack: Node.js & Express backend, Golang CLI, Postgres database, Google Cloud

Doppler | San Francisco, CA or Remote | Onsite | Remote OK | https://doppler.com

I'm Brian, the CEO of Doppler. We're creating a new category of tooling for an overlooked part of developing software — managing secrets. Applications typically require code and secrets, two pieces of a puzzle that form a living picture. Doppler is building the other half of the picture through the easiest-to-use platform. And we're doing it with an incredible team of brilliant, humble, and passionate people. Our team is small but growing fast and I believe this could be a place where you can create a large impact on the software industry.

To learn more about who we are, our engineering culture, and whether this is the right place for you, read our Key Values profile: https://www.keyvalues.com/doppler

Here are our open roles:

- Lead Product Designer: https://jobs.lever.co/doppler/cf84928c-4643-499f-ac15-4c4119...

- Senior Full Stack Engineer: https://jobs.lever.co/doppler/f293d858-c3cb-4c1b-b856-b39ed3...

- Senior Growth Marketer: https://jobs.lever.co/doppler/f69ab993-9e63-455d-9de0-4696f7...

Tech Stack: Node.js & Express backend, Golang CLI, Postgres database, Google Cloud

Doppler | San Francisco, CA or Remote | Onsite | Remote OK | https://doppler.com

Doppler is the easiest way to securely manage all your environment variables in one place. No more sharing secrets over Slack, copying .env files, or home-brewed solutions. Set up your development, staging, and production environments in minutes with integrations for every cloud provider. Doppler allows you to easily manage all your projects and your team's access to secrets.

To learn more about who we are, our engineering culture, and whether this is the right place for you, read our Key Values profile: https://www.keyvalues.com/doppler

Here are our open roles:

- Lead Product Designer: https://jobs.lever.co/doppler/cf84928c-4643-499f-ac15-4c4119...

- Senior Full Stack Engineer: https://jobs.lever.co/doppler/f293d858-c3cb-4c1b-b856-b39ed3...

- Senior Growth Marketer: https://jobs.lever.co/doppler/f69ab993-9e63-455d-9de0-4696f7...

Tech Stack: Node.js & Express backend, Golang CLI, Postgres database, Google Cloud

Doppler | San Francisco, CA or Remote | Onsite | Remote OK | https://doppler.com

Doppler is the easiest way to securely manage all your environment variables in one place. No more sharing secrets over Slack, copying .env files, or home-brewed solutions. Set up your development, staging, and production environments in minutes with integrations for every cloud provider. Doppler allows you to easily manage all your projects and your team's access to secrets.

To learn more about who we are, our engineering culture, and whether this is the right place for you, read our Key Values profile: https://www.keyvalues.com/doppler

Here are our open roles:

- Lead Product Designer: https://jobs.lever.co/doppler/cf84928c-4643-499f-ac15-4c4119...

- Senior Software Engineer: https://jobs.lever.co/doppler/f293d858-c3cb-4c1b-b856-b39ed3...

- Senior Growth Marketer: https://jobs.lever.co/doppler/f69ab993-9e63-455d-9de0-4696f7...

Tech Stack: Node.js & Express backend, Golang CLI, Postgres database, Google Cloud

Just went through their onboarding experience. It is amazing! Well done.

Doppler | San Francisco, CA or Remote | Onsite or Remote OK | https://doppler.com

Doppler is the easiest way to securely manage all your environment variables in one place. No more sharing secrets over Slack, copying .env files, or home-brewed solutions. Set up your development, staging, and production environments in minutes with integrations for every cloud provider. Doppler allows you to easily manage all your projects and your team's access to secrets.

To learn more about who we are, our engineering culture, and whether this is the right place for you, read our Key Values profile: https://www.keyvalues.com/doppler

Here are our open roles:

- Senior AppSec Engineer: https://jobs.lever.co/doppler/63e3511b-5463-4d02-a1f9-0bc463...

- Senior Full Stack Engineer: https://jobs.lever.co/doppler/f293d858-c3cb-4c1b-b856-b39ed3...

Tech Stack: Node.js & Express backend, Golang CLI, Postgres database, Google Cloud

Based on inbound interest we launched an API where your apps can create Doppler Share links: https://docs.doppler.com/reference#share-secret

Thanks for sharing! I have sent this feedback to our team as I am sure they will find it helpful. Separately, we do have an open Sr. AppSec role that you look like a great fit for. We love working with people that are direct who can also keep the conversation light hearted. If this sounds interesting, feel free to reach out directly at brian@doppler.com.

We move fast, don't have any brain teasers, and a care deeply about the culture we create.

Role: https://jobs.lever.co/doppler/63e3511b-5463-4d02-a1f9-0bc463...

We think we shipped the fix. Is the issue still occurring for you?

This is great feedback! I have updated the docs to show a placeholder token.

You are correct, the main Doppler product is not end-to-end encrypted. We use tokenization instead to secure the data. Here's a link that goes more in-depth on how that works: https://docs.doppler.com/docs/security-fact-sheet

Thanks for reporting! We have a fix coming out in the next hour.

Brian from Doppler here. We are an easy way to manage environment variables across projects and services. We did a Launch HN last year: https://news.ycombinator.com/item?id=24719722. Since then, we've been hearing repeatedly from our users that they want a more secure way to share one-off secrets, like API keys, passwords, credit cards, coupons, wire info, lockbox codes, etc. This is understandable, since using Slack, SMS, or email for this leads to your secrets living unencrypted in those systems forever.

So we've made a new product to address this. It is a one-click way to share one-off secrets, end-to-end encrypted with links that auto-expire after a certain number of views and days.

All the encryption is done browser-side so our servers never see the raw secret or the encryption key. We use AES-GCM to encrypt your secrets, with a symmetric key derived from a cryptographically random 64 character passphrase using PBKDF2. If you want to dive deeper into how the data flows, we documented every step of the send and receive flows: https://docs.doppler.com/docs/share-security

We built this so anyone can use it immediately without needing to create an account or jump through any hoops.

Try it out: https://share.doppler.com/s/zg5aqzfbidn9femgnaas2wf2syedqf0s...

Would love to hear what you guys think!

Doppler | https://doppler.com | Engineering

Join us in building a world-class engineering team taking the pain out of managing env vars & secrets such as API keys, database creds, certs, etc... through a lovable universal secrets manager. We are backed by all-star investors like Sequoia, Kleiner Perkins, Peter Thiel, and the CEO of GitHub.

Tech Stack:

- Languages: Javascript (Node.js) & Go

- Database: Postgres, Redis, RabbitMQ

- Infra: Google Cloud, Kubernetes

Join Doppler: https://www.keyvalues.com/doppler

Thank you! In Webflow you can use HTML Embed components. In there I wrote some javascript to type out each character.

I put a Gist that has all the code but fair warning it is pretty hacky as I made it over a weekend for fun. I definitely wouldn't treat this code as "high quality" code. https://gist.github.com/bvallelunga/6846593ca50500f058a1f07f...

Similar to AWS we plan to get extensive external compliance certifications starting with SOC 2. We are currently in our first audit cycle and plan to expand into other compliances there after. Truthfully we are still evaluating which compliances to get next (PCII, ISO, etc) based on customer demand.

We also do frequent pentests to help vet our infrastructure and security posture.

We built it using Webflow (an amazing YC company!) and used the Timber template as the foundation: https://webflow.com/templates/html/timber-ui-kit-website-tem...

One thing we strived for during the design phase was to make it feel like a tool you would want to use. From the colors to the bold fonts and large screenshots. I personally was inspired by what Stripe and Slack did, take a traditionally "unsexy" space and aim to make it "sexy".

We actually support that exact use case natively. Each Doppler project has the concept of root and branch configs where branch configs inherit their secrets from the root. There is a root config for each environment (dev, stg, prd). More here: https://docs.doppler.com/docs/enclave-config-branching

In your specific case I would recommend creating a Doppler project for each app. Then you can add the common secrets to the "prd" root config. From there create branch configs for each locations:

prd (holds common secrets)

- prd_us_east_1 (inherits secrets from root plus hold us_east_1 specific vars)

- prd_us_central_1 (inherits secrets from root plus hold us_central_1 specific vars)

When you need to add/modify/delete a secret for all production configs, just modify the "prd" config.

We realize that storing secrets requires trust and for some companies it may be outside of their comfort zone at the moment. We are currently focused on creating a super easy to use solution. An analogy: there are open source versions of Dropbox for users that don't trust Dropbox with their files (NextCloud, ownCloud, etc.), however this comes with the friction of having to host your own solution. We are more like Dropbox, where we want to create a solution that is incredibly easy to install, manage, and work with. That being said, a self-hosted solution is top of our mind as we totally acknowledge that some companies would not want to use a hosted solution.

Thank you! Indeed I am not much of a writer on HN but I love the community.

This is the exact use case that Doppler was built for! Doppler is designed to store API keys, secrets, config vars, etc. Depending on your setup (monolith vs microservices), you can group these into one project or many. From there you can fetch all your secrets in one call.

We love seeing other companies innovate to make managing secrets less painful. We have found that most developers really want a holistic way to manage secrets. One stark difference between Doppler and SecretHub is that we have a dashboard that makes it super easy to manage your secrets. We have a deep rooted focus on user experience.

The domain was available ;) More seriously, outside of the properties (easy to spell and most people have heard of it before) I wanted something that was more than just environment management. Something grand we could grow into.

We are friends with the folks at EnvKey! Our core philosophy is what’s different, we focus on building something for the everyday developer, where we abstract as much overhead as possible. A example of this is how you log into the Doppler CLI when developing. The “doppler login” command takes you to the browser and you sign in like how you would any other site. There is no need to remember API keys, everything is handled behind the scenes for you. Other things that set us apart: audit logs, versioning, and rich integrations with production infras like AWS, GCP, Heroku, Vercel, Netlify, etc.. Besides that, our pricing is much more friendly, we offer a free tier for unlimited users for all the core functionality.