Infisical

Auth

Variable	Required	Notes
INFISICAL_API_TOKEN	yes	Service token used by the API
INFISICAL_API_URL	no	Custom base URL (self-hosted). Defaults to Infisical Cloud.

export INFISICAL_API_TOKEN="st...."
# optional (self-hosted)
export INFISICAL_API_URL="https://infisical.example.com"

Mapping model

Infisical supports native secret paths, so lazyenv maps workspace folders directly to Infisical paths:

• apps/web -> /apps/web
• apps/api -> /apps/api

This is why Infisical is the cleanest store for monorepos.

Project and environments

In .lazyenv/config.json:

• store: must be infisical
• projectId: Infisical project id
• organizationId: required for some workflows (like store migrations)
• environments: lazyenv env names (Infisical supports these natively)

Notes

• If you self-host, set INFISICAL_API_URL or you’ll hit the cloud default.
• Your service token needs read/write permissions for the paths you use.