Skip to main content
The repository’s .env.example is the primary configuration reference. Create a private .env at the application root and supply values appropriate to the deployment.

Configuration groups

Example workflow

Edit values using a secure editor or deployment secret manager. Do not paste real .env contents into tickets or documentation.

Production checklist

  • Generate unique, high-entropy secrets per environment.
  • Use a restricted database account and encrypted database connections where supported.
  • Set production logging to an appropriate level; avoid verbose SQL logging containing personal data.
  • Disable public debug/monitor endpoints or protect them with strong access controls.
  • Restrict CORS, trusted origins, and redirect URLs.
  • Verify that file storage and mail credentials have least privilege.
  • Confirm that TYPEORM_SYNCHRONIZE is disabled for production schema management unless release guidance explicitly says otherwise.
  • Validate required variables at startup and fail safely when critical configuration is missing.