Operations

Environment variables

Reference for local and Vercel configuration. Never commit secrets; use the platform env UI or .env.local (gitignored).

Required for auth & data

  • NEXT_PUBLIC_SUPABASE_URL — project URL
  • NEXT_PUBLIC_SUPABASE_ANON_KEY — anon/public key

Required for encrypted provider keys

API_KEY_ENCRYPTION_SECRET — at least 16 characters; used server-side only for AES-256-GCM.

openssl rand -hex 32

Vercel

Steps

  1. Project → Settings → Environment Variables
  2. Add each key for Production (and Preview if needed)
  3. Redeploy after changes
Do not prefix secrets with NEXT_PUBLIC_ — that exposes them to the browser bundle.