Environment

The variables each app reads. The .env.example files hold the full list with comments.

API (`apps/api`)

Variable	Default
`APP_ENV`	`development`	`development`, `test`, `staging` or `production`
`DATABASE_URL`	`pglite://.data/pglite`	`postgres://…` when deployed
`AUTH_SECRET`	development value	At least 32 random characters; required when deployed
`API_URL`, `APP_URL`, `ADMIN_URL`, `SITE_URL`	localhost	Public URLs of each app
`EMAIL_PROVIDER`	`console`	`resend`, `postmark` or `smtp` when deployed
`STORAGE_DRIVER`	`local`	`s3` or `azure`
`BILLING_PROVIDERS`	none	e.g. `stripe,lemonsqueezy`
`QUEUE_DRIVER`	`postgres`	`rabbitmq`, `kafka` or `pubsub`
`WORKER_INLINE`	`true`	`false` to run jobs only in workers
`ADMIN_REQUIRE_TWO_FACTOR`	`true`
`CONTACT_EMAIL`	none	Where contact form messages go
`TURNSTILE_SECRET`	none	Requires Cloudflare Turnstile on public forms

Variable
`NEXT_PUBLIC_API_URL`	The API
`NEXT_PUBLIC_APP_URL`	The dashboard (admin portal and site)
`NEXT_PUBLIC_ADMIN_URL`	The admin portal (dashboard)
`NEXT_PUBLIC_SITE`	Which site pack the marketing site builds
`NEXT_PUBLIC_ANALYTICS_SRC`	An analytics script, loaded only after consent