Compare Environment Files (.env) Across Deployments

Environment File (.env) Diff

Environment files (.env) store configuration variables that differ across environments — development, staging, and production. Comparing these files helps detect configuration drift, missing variables, and unintentional value changes.

Structure of .env Files

# Database Configuration
DB_HOST=localhost
DB_PORT=5432
DB_NAME=myapp_dev
DB_PASSWORD=secret123

# API Settings
API_URL=https://api.dev.example.com
API_TIMEOUT=30

Types of .env Changes

Change	Example	Risk Level
Variable added	+ REDIS_URL=redis://...	Medium — app may need it
Variable removed	- LEGACY_API_KEY	High — may break features
Value changed	API_URL changed	Medium — intentional per env
Variable renamed	DB_PASS → DB_PASSWORD	High — app code must match
Comment changed	Documentation only	Low

Comparing Across Environments

A common task is comparing .env.development vs. .env.production:

--- .env.development
+++ .env.production
 DB_HOST=localhost          → DB_HOST=prod-db.internal
 DB_PORT=5432                 DB_PORT=5432
 DB_NAME=myapp_dev          → DB_NAME=myapp_prod
-DEBUG=true
+SENTRY_DSN=https://...
 API_URL=http://localhost    → API_URL=https://api.example.com

Safe Diffing Practices

Never display secret values in diffs. Instead:

1. Mask values — show only variable names: DB_PASSWORD=*** vs. DB_PASSWORD=***
2. Show keys only — compare just the variable names to find missing/extra variables
3. Hash values — show hash of each value to detect changes without revealing content
4. Use .env.example — compare against a template file with placeholder values

Detecting Configuration Drift

Configuration drift occurs when environments diverge unintentionally:

Variables in production but NOT in staging:
  - FEATURE_FLAG_NEW_UI
  - MONITORING_ENDPOINT

Variables in staging but NOT in production:
  - DEBUG_SQL
  - MOCK_PAYMENTS

Automation

Use diff tools in CI/CD pipelines to:

• Verify all required variables exist before deployment
• Alert when new variables are added to one environment but not others
• Generate a report of environment differences