majiayu000 Environment Variables
Split Structure
This project uses split env files (see docs/PRDs/env-system-refactor.md):
| File | Purpose | Prefix |
|---|---|---|
.env.client |
Public browser vars | NEXT_PUBLIC_* |
.env.api |
Server secrets | No prefix |
Adding New Variables
Client-side (Public)
- Add to
.env.client:NEXT_PUBLIC_API_URL=https://api.example.com - Access in code:
const url = process.env.NEXT_PUBLIC_API_URL;
Server-side (Secret)
- Add to
.env.api:STRIPE_SECRET_KEY=sk_live_xxx - Access only in server code:
// Only in app/api/*, server/*, or Server Components const key = process.env.STRIPE_SECRET_KEY;
Security Rules
- Never put secrets in
.env.client - Never prefix secrets with
NEXT_PUBLIC_ - Supabase anon key is public (safe for client)
- Supabase service role key is secret (API only)
Local Development
Copy example files:
cp .env.client.example .env.client
cp .env.api.example .env.api
Cloudflare Deployment
Set vars in Cloudflare Pages dashboard under Settings > Environment Variables.