#3470·gopass

Load hierarchy of shared secrets with `gopass env`

Author: timabellCreated Jun 15, 2026Updated Aug 25, 2026

I have a set of microservices to run locally that I run with gopass env.

Some of the secrets they need are shared, and some of are unique to each service.

I was hoping gopass env services/service-foo would load all of the following:

services/shared-secret1
services/shared-secret2
services/service-foo/secret3
services/service-foo/secret4

But it seems it only loads that the ones directly in services/service-foo/.

It would be handy to have an option for it to merge all the layers so service-foo and service-bar could share secrets stored in services/ (for example). If there were conflicts then I'd want the deepest level to override the shared secrets in order to allow refining the setup for specific services that vary.

Thanks for gopass, it's helping keep my secrets safer from LLMs and malware.