Skip to main content
Use .env.local for development and your platform’s secret store for deployment. NEXT_PUBLIC_ values are public configuration. Server credentials, private keys, session secrets, and database URLs must not be placed in profile JSON or committed templates. The .env.example also contains GitHub App client ID/secret fields. Do not confuse those with the OAuth credentials or the App ID/private key required for installation tokens. Review the consuming source before configuring an integration. Some self-hosting settings are still code constants: GitHub App installation URLs and the generated telemetry endpoint require source review. See development and deployment. This reference does not claim that all integrations can be relocated solely through environment variables.