Exposed .env File

Challenge Question

This small internal app reads its configuration, including credentials, from a dotfile sitting right next to it in the web root. Dotfiles are easy to forget about when locking down a server, and this one was never blocked from being requested directly. See if it's reachable, and what it's holding.