Never commit
.env.local or paste production secrets into docs, tickets, or chat. Rotate any credential that has been exposed.Required
NEXTAUTH_SECRET:
Optional
REDIS_URL, locks and caches are in-memory per serverless isolate and will not coordinate across instances.
Super Admins can confirm whether these variables are set (not their values) on System health.
Google redirect URIs
- Local
- Production
http://localhost:3000/api/auth/callback/googleVercel
Add the same keys in Project → Settings → Environment Variables for Production, Preview, and Development as needed. Redeploy after changingNEXTAUTH_URL or OAuth clients.