I’ve been a long time user of Directus, but I have never been able to simply see all my configuration variables values.
Since they can be defined in many different ways (.env files, config.json, compose files, kubernetes, etc.), it would be nice to have some place accessible to admins to see final values used by directus.
Implementing something like this on the frontend is risky because an improperly configured API for reading environment variables could expose critical secrets to malicious actors.
If you did want something like this, you could implement it yourself with a custom endpoint extension that reads process.env and exposes it to a module extension on the frontend for display
Indeed not something that’s currently supported out of the box. To @TheDerf‘s point, simply returning the env as-is comes with massive security risks, so is not something we should just do as-is. That being said, I’ve jotted down your comment on our end as a new feature request so we can consider it for future implementation. Thanks!
Thanks for the quick responses, I understand totally the security risks and why that wouldn’t be a good idea to expose this in the app/api. Maybe a CLI command would be more secure ? (not sure if the CLI uses the api internally)