Manage secrets

Use app environment variables for values that change between environments or should not be committed to your code.

Common secrets

Secret	Typical variable	Where it comes from
Database URL	`DATABASE_URL`	Database creation response
API key	`HYZE_API_KEY`	Dashboard or keys API
Session secret	`SESSION_SECRET`	Your app or auth provider
Webhook secret	`WEBHOOK_SECRET`	Third-party integration

Update app variables

curl -X PUT https://api.hyzecloud.com/api/apps/app_001/env \
  -H "Authorization: Bearer hyze_your_key" \
  -H "Content-Type: application/json" \
  -d '{
    "envVars": {
      "NODE_ENV": "production",
      "DATABASE_URL": "postgresql://user:pass@host:5432/db"
    }
  }'

PUT /api/apps/:appId/env merges the variables you send into the existing environment.

Variables are injected at startup. Restart the app after changing values used during boot.

Rotate an API key

Create a replacement key

curl -X POST https://api.hyzecloud.com/api/api-keys/ \
  -H "Authorization: Bearer hyze_your_key" \
  -H "Content-Type: application/json" \
  -d '{ "name": "CI/CD replacement" }'

Update your systems

Swap the old key in CI/CD, internal services, and anything that calls Hyze Cloud.

Revoke the old key

curl -X DELETE https://api.hyzecloud.com/api/api-keys/key_abc123 \
  -H "Authorization: Bearer hyze_your_key"

A new key’s value is shown only once. Store it in your secrets manager immediately.

Next steps

API keys

Create, update, disable, and revoke keys via API.

Secrets and environment variables

Understand the platform’s env var rules.

Last modified on September 1, 2026

Deploy

Operate

Common secrets

Update app variables

Rotate an API key

Next steps

API keys

Secrets and environment variables

​Common secrets

​Update app variables

​Rotate an API key

​Next steps

API keys

Secrets and environment variables

Common secrets

Update app variables

Rotate an API key

Next steps