How we work with environment variables and secrets

In Workflow

All environment variables and secrets are defined in GitHub:
- Either on repo level:
  - Repository secrets
  - (We don't use repository variables to keep things simpler.)
- Or on Environment level
  - Staging
  - Production
Some variables are dynamically created when feasible to reduce the number of variables in GitHub
Consider adding things that don't change to the code instead of the environment variables/secrets

The docker-compose.server.yml only uses variables from our .env file which we create in setup-env.

Name	Path	Notes
`ENVIRONMENT`	`vars.ENVIRONMENT`
`APP_ORIGIN`	`vars.APP_ORIGIN`
`APP_DOMAIN`	`vars.APP_DOMAIN`
`NEXT_PUBLIC_APP_ENV`	`.env`-variable	In `.env` as `vars.ENVIRONMENT`
`NEXT_PUBLIC_APP_ORIGIN`	`.env`-variable	In `.env` as `vars.APP_ORIGIN`

`MAILJET_APIKEY_PUBLIC`	`secrets.MAILJET_APIKEY_PUBLIC`
`MAILJET_APIKEY_PRIVATE`	`secrets.MAILJET_APIKEY_PRIVATE`

`POSTGRES_USER`	`secrets.POSTGRES_USER`
`POSTGRES_PASSWORD`	`secrets.POSTGRES_PASSWORD`
`POSTGRES_DB`	`vars.POSTGRES_DB`
`POSTGRES_HOST`	`vars.POSTGRES_HOST`
`DATABASE_URL`	`.env`-variable	In `.env` as composite value

`SESSION_SECRET_KEY`	`secrets.SESSION_SECRET_KEY`	Required by Blitz

`ADMIN_EMAIL`	`vars.ADMIN_EMAIL`

`S3_UPLOAD_KEY`	`secrets.S3_UPLOAD_KEY`
`S3_UPLOAD_SECRET`	`secrets.S3_UPLOAD_SECRET`
`S3_UPLOAD_ROOTFOLDER`	`.env`-variable	In `.env` as composite value

`TS_API_KEY`	`secrets.TS_API_KEY`

`OPENAI_API_KEY`	`secrets.OPENAI_API_KEY`

`LANGFUSE_SECRET_KEY`	`secrets.LANGFUSE_SECRET_KEY`
`LANGFUSE_PUBLIC_KEY`	`secrets.LANGFUSE_PUBLIC_KEY`
`LANGFUSE_BASEURL`	`vars.LANGFUSE_BASEURL`

`AWS_ACCESS_KEY_ID`	`secrets.AWS_ACCESS_KEY_ID`	Repository secret
`AWS_SECRET_ACCESS_KEY`	`secrets.AWS_SECRET_ACCESS_KEY`	Repository secret
`SSH_HOST`	`secrets.SSH_HOST`
`SSH_USERNAME`	`secrets.SSH_USERNAME`
`SSH_PASSWORD`	`secrets.SSH_PASSWORD`

`LUCKY_CLOUD_TOKEN`	`secrets.LUCKY_CLOUD_TOKEN`	Repository secret

Name		Name	Last commit message	Last commit date
Latest commit History 3,372 Commits
.cursor/rules		.cursor/rules
.github		.github
.husky		.husky
.vscode		.vscode
db		db
docker		docker
emails		emails
imap-listener		imap-listener
public		public
scripts		scripts
src		src
tests		tests
.dockerignore		.dockerignore
.editorconfig		.editorconfig
.env.local.example		.env.local.example
.env.test		.env.test
.eslintignore		.eslintignore
.eslintrc.json		.eslintrc.json
.gitignore		.gitignore
.npmrc		.npmrc
.nvmrc		.nvmrc
.prettierignore		.prettierignore
.prettierrc		.prettierrc
LICENSE.md		LICENSE.md
README.md		README.md
docker-compose.server.yml		docker-compose.server.yml
docker-compose.yml		docker-compose.yml
next-env.d.ts		next-env.d.ts
next.config.js		next.config.js
package-lock.json		package-lock.json
package.json		package.json
playwright.config.ts		playwright.config.ts
postcss.config.js		postcss.config.js
tailwind.config.js		tailwind.config.js
tsconfig.json		tsconfig.json
types.ts		types.ts
vitest.config.ts		vitest.config.ts