Configuration

Create a .lazyenvrc file (TOML) in your project root, or ~/.config/lazyenv/config.toml for global settings. CLI flags override config file values. Run lazyenv --show-config to see the effective configuration.

Key	Default	Description
`recursive`	`false`	Scan `.env` files in subdirectories recursively.
`show-secrets`	`false`	Display secret values in cleartext. When false, sensitive keys are masked with asterisks. Toggleable at runtime with `Ctrl+S`.
`no-backup`	`false`	Skip creating `.bak` backup files before the first save of each file in a session.
`no-git-check`	`false`	Skip checking if files are covered by `.gitignore`. Auto-disabled if `git` is not available.
`no-theme-bg`	`false`	Discard the theme's background color, keeping the terminal's native background. Useful for transparent terminals.
`no-mouse`	`false`	Disable mouse support. Useful in terminals or multiplexers with mouse conflicts.
`sort`	`"position"`	Variable list sort order: `"position"` preserves file order, `"alphabetical"` sorts by key name. Toggleable at runtime with `o`.
`theme`	See description	Built-in color theme. When empty, `default-dark` or `default-light` is used automatically based on terminal background detection.

Run lazyenv --list-themes to see all available themes, or lazyenv --themes to browse them interactively with a live preview.

[files]

Control which files are detected by lazyenv. Exclude patterns are checked first and take priority over include.

[files]
include = [".env", ".env.*", "*.env"]
exclude = ["*.bak", "*.example"]

Key	Default	Description
`include`	`[".env", ".env.", ".env"]`	Glob patterns to match env files. A file is included if it matches any pattern.
`exclude`	`["*.bak"]`	Glob patterns to reject. Checked before include — a matching file is always skipped.

[layout]

Fine-tune column widths and padding. All values are in characters and must be greater than zero.

[layout]
var-list-max-key-width = 30
diff-max-key-width = 25
matrix-key-width = 20
matrix-col-width = 14
var-list-min-value-width = 10
var-list-padding = 12
diff-min-value-width = 8
diff-padding = 10
file-list-width = 0
mouse-scroll-lines = 1

Key	Default	Description
`var-list-max-key-width`	`30`	Maximum width for variable keys in the main panel. Longer keys are truncated with ellipsis.
`var-list-min-value-width`	`10`	Minimum width for variable values, preventing them from becoming unreadably narrow.
`var-list-padding`	`12`	Horizontal space reserved for borders, markers, and spacing in variable list rows.
`diff-max-key-width`	`25`	Maximum width for keys in the compare/diff view.
`diff-min-value-width`	`8`	Minimum width for values in the diff view.
`diff-padding`	`10`	Horizontal space reserved for borders, markers, and spacing in diff rows.
`matrix-key-width`	`20`	Width of the key column in the completeness matrix.
`matrix-col-width`	`14`	Width of each file column in the matrix. Controls how many files fit on screen.
`file-list-width`	`0`	Width of the file list panel. `0` = auto (1/4 of screen). Min 20. File names truncate to fit.
`mouse-scroll-lines`	`1`	Number of lines scrolled per mouse wheel event.

[secrets]

Customize how secret detection works. By default, keys are detected as secrets by name patterns and values by entropy-based heuristic.

[secrets]
safe_patterns = ["_HOST", "_URL", "_ENDPOINT"]
extra_patterns = ["_CREDENTIAL"]
value_heuristic = false

Key	Default	Description
`safe_patterns`	`[]`	Key patterns to never treat as secret, overriding all built-in detection.
`extra_patterns`	`[]`	Key patterns to always treat as secret, in addition to built-ins.
`value_heuristic`	`true`	Enable entropy-based value heuristic. When false, only key name and value prefix matching apply.

Pattern convention: _HOST (starts with _) matches as suffix, PUBLIC_ (ends with _) matches as prefix, DATABASE_HOST matches as exact key name. Case insensitive.

Built-in detection rules

Keys are detected as secrets if they match any of the following (case insensitive):

Rule	Patterns
Exact match	`PASSWORD`, `SECRET`, `TOKEN`, `API_KEY`, `ACCESS_KEY`, `PRIVATE_KEY`
Suffix match	`_KEY`, `_SECRET`, `_TOKEN`, `_PASSWORD`, `_PASS`, `_API_KEY`, `_AUTH`, `_CREDENTIAL`, `_PRIVATE`
Prefix match	`SECRET_`, `TOKEN_`, `AUTH_`, `PRIVATE_`
Value prefix	`sk-`, `pk-`, `ghp_`, `gho_`, `Bearer` (always active, even with `value_heuristic = false`)
Value entropy	Values ≥16 chars with mixed case + digits and Shannon entropy ≥4.0 bits/char (gated by `value_heuristic`)

safe_patterns is checked first and overrides everything, including built-in rules and extra_patterns.

[colors]

Hex color overrides. These override individual theme colors. Leave empty or omit to use the theme or auto-detected defaults.

theme = "nord"

[colors]
primary = "#FF6600"    # override just primary, rest from nord

Resolution order: theme defaults → explicit overrides → no-theme-bg clears bg.

Key	Dark default	Light default	Used for
`primary`	`#BD93F9`	`#7B2FBE`	Panel titles, selected items, status bar keys, help keys.
`warning`	`#FFB86C`	`#D97706`	Empty value warnings, placeholder warnings, changed lines in diff.
`error`	`#FF5555`	`#DC2626`	Errors, duplicate key warnings, git warnings, removed lines in diff.
`success`	`#50FA7B`	`#059669`	Success messages, added lines in diff.
`muted`	`#6272A4`	`#6B7280`	Status bar, help descriptions, comments, secondary text.
`fg`	`#F8F8F2`	`#1F2937`	Default text: keys, values, normal list items.
`bg`	(none)	(none)	Terminal background. Empty keeps the terminal's native background.
`border`	`#44475A`	`#D1D5DB`	Panel borders (file list and variable list).
`cursor-bg`	`#44475A`	`#E5E7EB`	Background highlight on the cursor line.
`modified`	`#FFB86C`	`#D97706`	Marker color for modified variables (`*`).
`added`	`#50FA7B`	`#059669`	Marker color for added variables (`+`).
`deleted`	`#FF5555`	`#DC2626`	Marker color for deleted variables (`-`).