Configure environment and secrets for Spring Boot

Configuration and secrets for a Spring Boot app on Ample. Verified on Spring Boot: an --env value delivered encrypted and reported as present without being echoed (secret=set). Build and start: ./mvnw -q -DskipTests package (or the Gradle wrapper) producing one application jar, then java -jar on the jvm-21 template (Temurin JDK 21) with server.port read from PORT.

Prerequisites

• A Spring Boot project (./mvnw -q -DskipTests package (or the Gradle wrapper) producing one application jar, then java -jar on the jvm-21 template (Temurin JDK 21) with server.port read from PORT)
• An Ample account token with servers:write

Workflow Steps

Build and start

./mvnw -q -DskipTests package (or the Gradle wrapper) producing one application jar, then java -jar on the jvm-21 template (Temurin JDK 21) with server.port read from PORT; the server must bind 0.0.0.0 on PORT.

Pass values on deploy

Use --env KEY=value (repeatable) or --env-file; values are encrypted at rest and reused on redeploys. Declare names only in ample.toml.

Command: ample deploy . --name --public --env MY_SECRET=...

Verify

Fetch the live URL and /p/configuration-secrets on the example; on failure read the build and runtime logs.

Command: ample logs --kind build

Examples

Spring Boot pattern fixture

Verified configuration and secrets on Spring Boot.

Source Reference: tests/deploy-canaries/spring-boot-patterns

Success Checks

• App responds on its public URL

  • Kind: http_get
  • Path: /
  • Expect: ample canary spring boot patterns

• Configuration-secrets check from the example

  • Kind: http_get
  • Path: /p/configuration-secrets
  • Expect: see the pattern fixture checks

Limitations

• Verified on the jvm-21 template at s-1vcpu-2gb; other sizes and Spring Boot major versions are not verified.
• Region, compliance attestations, and request-duration limits are unknown and not claimed.

Cost Estimate

• Currency: USD
• Monthly Amount: 5.0
• Basis: Size prices from pricing.toml (loaded by the API) at build revision 1ac5595375130d45290090e82ed0f554ccd45405-dirty

Components

• Name: App server
  • Size: s-1vcpu-1gb
  • Quantity: 1.0
  • Monthly Amount: 5.0

Note: Always-on monthly price of the tested sizes; apps auto-pause when idle. Buckets are allocation-priced per quota and not included.

Evidence Summary

• Kind: canary_run
• Summary: Spring Boot pattern fixture deployed on Ample (./mvnw -q -DskipTests package (or the Gradle wrapper) producing one application jar, then java -jar on the jvm-21 template (Temurin JDK 21) with server.port read from PORT); for this guide: an --env value delivered encrypted and reported as present without being echoed (secret=set).
• Observed At: 2026-09-21T02:34:39Z
• Implementation Revision: 1d28ae0-dirty (CLI 0.1.21)
• Expires At: 2027-03-20T02:34:39Z
• Scope:
  • Checks: /p/configuration-secrets
  • Template: jvm-21

Unknowns

• Region availability is unknown until a verified region fact is recorded
• Compliance attestations are unknown; none are claimed.

Formats

• HTML: View
• Markdown: View
• JSON: View