Hi @hritikpandey

There are number of ways which can help you to protect your .env file access through API.

I will list some of them.

1. Restrict Public Access

    Apache: Use .htaccess to deny access to the .env file. Add the following rule in your .htaccess file:


<Files .env>
    Order allow,deny
    Deny from all
</Files>

Nginx: Add a rule in your Nginx configuration to block access to the .env file.

location ~ /\.env {
    deny all;
}

2. File Permissions: Ensure that the .env file has the correct permissions. Only the web server or owner should be able to read this file.

You can use the below command to do the same:

chmod 640 .env
chown <user>:<group> .env

I hope this solves your issue.

Thanks!