Projects and environments

Projects is the main screen of the Admin UI. It shows the model described in projects, environments, and secrets: a list of projects on the left, the selected project's environments, and the secrets of the selected environment.

The project rail

The left rail lists every project. When you arrive with nothing selected, Dopbase opens the first project and its first environment so you land on something usable instead of an empty screen.

• Create a project with the new-project control in the rail. Names are unique on the server, so pick the application's name: payment-service, not backend.
• Rename a project from its menu. Existing links that used the old name stop working, because names are part of the address.
• Delete a project and Dopbase shows what goes with it (every environment and every secret inside) before you confirm. Deletion cannot be undone.

Environments

Selecting a project lists its environments. Each one holds its own set of secret values, so DATABASE_URL in development can point somewhere entirely different from DATABASE_URL in production.

• Create an environment with a name such as development, staging, or production.
• Rename it from its menu.
• Delete it and Dopbase counts what will be removed, secrets and runner tokens alike, before you confirm.

Addresses you can share

Selection lives in the URL, not in some hidden app state:

/projects/p/payment-service/e/env_482731

The project part uses the name. The environment part uses its immutable ID. Bookmark a production environment, paste a link to a teammate, or put the URL in a runbook. The link opens the same place later.

The environment ID in the address is the same ID the CLI accepts. The selected environment header shows the ID with a copy button for dopbase run and deployment configuration.

Runner tokens

Each environment has a Tokens tab next to its secrets. This is where machine identities come from:

• Create a token with a name such as production-server. Choose no expiry, a preset lifetime, or a custom number of hours or days up to three years. Dopbase shows the plaintext token once. Copy it before closing the dialog because Dopbase cannot display it again.
• Check expiry in the token list. Expired tokens cannot authenticate. Create a replacement if you need a different lifetime.
• Revoke a token when a server is decommissioned or a token may have leaked. Revocation is immediate.

A runner token can read and export the values of its assigned environment. Use dopbase run to inject them or dopbase export to write a file. It cannot change secrets or access another environment. Give each deployed workload its own token. See identity and tokens for the full rules.