Shell Integration

fnox can automatically load secrets when you cd into directories with a fnox.toml file.

Enable Shell Integration

Add this to your shell profile:

Bash

# Add to ~/.bashrc or ~/.bash_profile
eval "$(fnox activate bash)"

Zsh

# Add to ~/.zshrc
eval "$(fnox activate zsh)"

Fish

# Add to ~/.config/fish/config.fish
fnox activate fish | source

How It Works

Once enabled, fnox hooks into your shell's cd command. When you enter a directory with fnox.toml:

~/projects $ cd my-app
fnox: +3 DATABASE_URL, API_KEY, JWT_SECRET
~/projects/my-app $

When you leave:

~/projects/my-app $ cd ..
fnox: -3 DATABASE_URL, API_KEY, JWT_SECRET
~/projects $

Output Control

Control what gets printed with FNOX_SHELL_OUTPUT:

# Silent mode (no output)
export FNOX_SHELL_OUTPUT=none

# Normal mode (show count and keys) - default
export FNOX_SHELL_OUTPUT=normal

# Debug mode (verbose logging)
export FNOX_SHELL_OUTPUT=debug

Using Profiles

Switch environments with FNOX_PROFILE:

# Use production secrets
export FNOX_PROFILE=production
cd my-app
# fnox: +3 DATABASE_URL, API_KEY, JWT_SECRET (from production profile)

# Switch to staging
export FNOX_PROFILE=staging
cd .  # Reload secrets
# fnox: -3 +3 DATABASE_URL, API_KEY, JWT_SECRET (from staging profile)

Hierarchical Loading

fnox searches parent directories for fnox.toml files and merges them:

project/
├── fnox.toml              # Common secrets (age provider, shared keys)
└── services/
    ├── api/
    │   └── fnox.toml      # API-specific secrets
    └── worker/
        └── fnox.toml      # Worker-specific secrets

When you cd services/api/, fnox loads:

1. Secrets from project/fnox.toml
2. Secrets from project/services/api/fnox.toml (overrides parent)

Manual Reload

Force a reload without changing directories:

cd .

Or temporarily disable and re-enable:

# Disable
fnox deactivate

# Re-enable
eval "$(fnox activate bash)"

Next Steps

• Profiles - Manage multiple environments
• Hierarchical Config - Organize secrets across directories
• Real-World Example - See a complete setup