Env groups & secret files
Environment groups hold variables shared across services. Link a group from the Environment tab; values merge at deploy time.
Secret files
Upload files (e.g. JSON keys, TLS bundles) under service Settings. They are written to a secure path inside the container at deploy.
Import / export
POST /v1/services/:id/env-vars/import and GET .../export for bulk .env management.