Server Configuration

These environment variables are required to run the Envault server (Next.js app).

Required Variables

Variable	Description	Example
`NEXT_PUBLIC_SUPABASE_URL`	The URL of your Supabase project.	`https://xyz.supabase.co`
`NEXT_PUBLIC_SUPABASE_ANON_KEY`	The anonymous public key for Supabase.	`eyJhbGcis...`
`SUPABASE_SERVICE_ROLE_KEY`	The secret service role key. Critical Security.	`eyJhbGcis...`
`ENCRYPTION_KEY`	32-byte hex string used as the Master Key.	`a1b2c3d4...`

Variable	Description	Default
`REDIS_URL`	URL for Redis caching.	`redis://redis:6379`
`RESEND_API_KEY`	Resend API key for sending application emails.	`re_123456789...`
`LOG_LEVEL`	Logging verbosity.	`info`

If you enable GitHub integration, add the following:

Variable	Description	Example
`NEXT_PUBLIC_GITHUB_APP_NAME`	GitHub App slug name	`envault`
`ENVAULT_GITHUB_APP_CLIENT_ID`	GitHub App client ID	`Iv1.xxxxx`
`ENVAULT_GITHUB_APP_CLIENT_SECRET`	GitHub App client secret	`xxxxxx`
`ENVAULT_GITHUB_APP_PRIVATE_KEY`	GitHub App private key (single-line, `\n` escaped)	`"-----BEGIN RSA PRIVATE KEY-----\n...\n-----END RSA PRIVATE KEY-----"`
`ENVAULT_GITHUB_WEBHOOK_SECRET`	Secret to verify GitHub webhook signatures	`whsec_xxxxx`

To generate a secure ENCRYPTION_KEY, use:

openssl rand -hex 32