Google OAuth client id (from Google Cloud Console).
Google OAuth client secret (from Google Cloud Console).
Instagram app client id (from Meta Developer Portal). Server-only — the authorization URL is built server-side, so it is not exposed to the client.
Instagram app client secret (from Meta Developer Portal).
Base URL of the app (e.g. https://yourapp.com). Used for SEO and Apple Web App metadata.
Email auth endpoint URL (client-side, e.g. /api/email).
File upload endpoint URL (client-side, e.g. /api/file).
Google OAuth endpoint URL (client-side, e.g. /api/google).
GraphQL endpoint URL (client-side, e.g. /api/graphql).
AWS S3 URL.
Base URL of the multi-platform social OAuth route (client-side, e.g.
/api/social). Each provider's redirect URI is <base>/<platform>.
Node environment (development, production, etc.). Used for Apollo landing page and introspection.
Secret key for signing JWT refresh tokens.
AWS access key id for S3.
AWS secret access key for S3.
AWS S3 bucket name.
AWS region for S3 (e.g. us-east-1).
Secret key for signing JWT access tokens.
Cloudflare Turnstile secret key (optional — enables captcha on auth routes).
Google Cloud OAuth client id for YouTube connections. Falls back to
GOOGLE_CLIENT_ID. Server-only.
Google Cloud OAuth client secret for YouTube connections. Falls back to
GOOGLE_CLIENT_SECRET, so one client can serve login and YouTube.
Enum of all environment variable keys used by the naystack stack. Use with getEnv or getEnvValue to read these variables.