---
name: "Environment and Config Standards"
description: "Cross-project standards for env and conf files, with secure configuration defaults."
applyTo: "**/*.env,**/*.env.*,**/*.conf"
---

- Keep secrets out of source-controlled env files.
- Use environment-specific overrides instead of duplicating large config blocks.
- Keep `.example` templates free of real credentials.
- Document required variables and reasonable defaults.
- Prefer least-privilege and secret isolation practices.
- Ensure runtime/deploy scripts fail clearly when required variables are missing.