Environment variables

Copy the sample file at the repo root:

cp .env.example .env.local

Never commit .env.local or paste production secrets into docs, tickets, or chat. Rotate any credential that has been exposed.

Required

# MongoDB (Atlas recommended)
MONGODB_URI=mongodb+srv://USER:PASSWORD@CLUSTER/d79-directory?retryWrites=true&w=majority

# NextAuth
NEXTAUTH_URL=http://localhost:3000
NEXTAUTH_SECRET=generate-a-long-random-string

# Google OAuth Web client
GOOGLE_CLIENT_ID=xxxxx.apps.googleusercontent.com
GOOGLE_CLIENT_SECRET=GOCSPX-xxxxx

Generate NEXTAUTH_SECRET:

openssl rand -base64 32

Optional

# Required in production (locks, cache, save rate limits, logout revoke, admin rate limits)
REDIS_URL=redis://default:PASSWORD@HOST:PORT

# Optional API error reporting (do not send form answers to Sentry)
SENTRY_DSN=

# Optional NY-only gate in src/proxy.js. off (default) | deny
# GEO_RESTRICT=

Without REDIS_URL, locks and caches are in-memory per serverless isolate and will not coordinate across instances. Set GEO_RESTRICT=deny only after Vercel Firewall log rules show no legitimate New York schools matching as out-of-state. Missing geo headers (localhost) are allowed. HTML denials then show /unavailable; APIs still return 403 JSON. See Edge proxy and security. Add NEXTAUTH_SECRET (and Preview NEXTAUTH_URL) to Preview, not only Production — next build evaluates API routes while collecting page data. Super Admins can confirm whether these variables are set (not their values) on System health.

Google redirect URIs

Local
Production

http://localhost:3000/api/auth/callback/google

https://<your-domain>/api/auth/callback/googleSet NEXTAUTH_URL to the same origin, including https://, with no path (trailing slash is tolerated but avoid duplicates in Google Console).

Vercel

Add the same keys in Project → Settings → Environment Variables for Production, Preview, and Development as needed. Redeploy after changing NEXTAUTH_URL or OAuth clients.

Getting Started

Architecture & Data Flow

Core Features & Workflows

API & Database Reference

Deployment & Operations

Required

Optional

Google redirect URIs

Vercel

​Required

​Optional

​Google redirect URIs

​Vercel

Required

Optional

Google redirect URIs

Vercel