Platanist Nest

Ciphertext Vault

CLI

Download and use nest-cli
Install binaries from release v0.1.1, verify checksums, then push and pull encrypted.envsecrets from your own workflow.
Verify checksum
Always verify downloaded binaries before installation.
checksums.txt
curl -LO https://github.com/abdullahanzar/nest-cli/releases/download/v0.1.1/checksums.txt
sha256sum -c checksums.txt --ignore-missing
Install and make executable
Example for Linux amd64. Replace filename for your platform.
curl -LO https://github.com/abdullahanzar/nest-cli/releases/download/v0.1.1/nest-cli_0.1.1_linux_amd64.tar.gz
tar -xzf nest-cli_0.1.1_linux_amd64.tar.gz
chmod +x nest
sudo mv nest /usr/local/bin/nest
nest --help
Usage: Mongo mode (default)
Developer-owned MongoDB backend, encrypted push/pull workflow.
nest init --origin origin --mongo-uri "mongodb://user:pass@host:27017" --mongo-db nest_cli
nest keys generate --profile modern
nest keys register --origin origin
nest push origin my-app
nest pull origin my-app
Usage: API compatibility mode
For environments using `platanist-nest` API routes.
nest init --origin legacy --mode api --api-url https://api.example.com
nest auth login --origin legacy --email you@example.com --api-key <YOUR_API_KEY>
nest keys register --origin legacy
nest push legacy my-app
nest pull legacy my-app
Security notes
Operational reminders for CLI-based secret workflows.
Secret plaintext still exists locally after `nest pull`; secure your workstation.
Protect your Mongo credentials and key bundle backups as high-value secrets.
In API mode, authenticate with `nest auth login` before push or pull operations.