We just recently adopted this and it's crazy to me how I spent years just copying around gitignored .env files and sharing 1password links. Highly underrated tool.

Has done "wat" for years?

I use sops for encrypting yaml files. But how does it replace .env or other ENV var setters/holders?

Yeah, if you want .env-ish behavior, use sops + age. Or dotenvx.

Literally the first thing I though of.

Came to say this.