Skip to main content
Copy the sample file at the repo root:
Never commit .env.local or paste production secrets into docs, tickets, or chat. Rotate any credential that has been exposed.

Required

Generate NEXTAUTH_SECRET:

Optional

Without REDIS_URL, locks and caches are in-memory per serverless isolate and will not coordinate across instances. Super Admins can confirm whether these variables are set (not their values) on System health.

Google redirect URIs

http://localhost:3000/api/auth/callback/google

Vercel

Add the same keys in Project → Settings → Environment Variables for Production, Preview, and Development as needed. Redeploy after changing NEXTAUTH_URL or OAuth clients. Vercel env UI Caption: Add screenshot showing Vercel environment variables for MONGODB_URI, NEXTAUTH_URL, NEXTAUTH_SECRET, GOOGLE_CLIENT_ID, GOOGLE_CLIENT_SECRET, REDIS_URL, SENTRY_DSN.