Environment Variables

Configure production values through a protected deployment environment or secret manager. Never publish secret values.

Application

NODE_ENV, PORT, SERVICE_NAME, SERVICE_VERSION, LOG_LEVEL
APP_PUBLIC_URL - canonical public HTTPS origin.
CORS_ORIGINS - allowed browser origins.
SESSION_COOKIE_NAME, SESSION_TTL_DAYS

Data and storage

DATABASE_URL
REDIS_URL
OBJECT_STORAGE_ENDPOINT, OBJECT_STORAGE_PORT, OBJECT_STORAGE_USE_SSL
OBJECT_STORAGE_ACCESS_KEY, OBJECT_STORAGE_SECRET_KEY, OBJECT_STORAGE_BUCKET
public storage endpoint fields where the deployment separates internal and browser-reachable endpoints.

Security and billing

MFA_ENCRYPTION_KEY
STORAGE_CREDENTIAL_ENCRYPTION_KEY
TOKEN_LEDGER_SECRET
STRIPE_SECRET_KEY, STRIPE_PUBLISHABLE_KEY, STRIPE_WEBHOOK_SECRET

Email and features

SMTP_HOST, SMTP_PORT, SMTP_SECURE, SMTP_USER, SMTP_PASSWORD, EMAIL_FROM
GOOGLE_FONTS_API_KEY
MCP_PAGES_ENABLED
RENDER_RUNTIME_URL, CHROMIUM_EXECUTABLE_PATH

IMAGE PLACEHOLDER - Secret-management screen Replace with a sanitized secret-manager view showing variable names only, never values. Recommended size: 1600 x 900 px.