Credentials and environment values
Keep repository tokens and application configuration encrypted, scoped, and recoverable.
HTTPS repository tokens
Create a named credential under Credentials for a private HTTPS repository. Portal encrypts the token at rest and public responses return metadata only. You cannot delete a credential while a project still selects it; change the project first.
Project environment
Use the Deploy drawer to add or edit project variables. Mark a key as sensitive when its value must be hidden later: sensitive values are never returned to the browser, while non-sensitive values can be shown for editing. New variables require a value; blank fields preserve existing values. Portal accepts at most 50 variables in the row editor.
Encryption-key rule
HOSTMGR_SECRET_KEY encrypts Git tokens, webhook endpoints, database passwords, and project environment content. Generate it once and preserve it. Changing or losing it makes encrypted values unreadable. Do not put it, tokens, environment values, or the owner password in source control, shell history, screenshots, or logs.
Back up the pair
A recoverable backup includes /etc/dashboard-portal/dashboard-portal.env and /var/lib/dashboard-portal together. Protect it with encryption and restricted access.