# Client-side env vars that apps consume (copied into apps/mobile/.env and apps/desktop/.env). # Server-side vars (POSTGRES_PASSWORD, JWT_SECRET, SERVICE_ROLE_KEY, SMTP_*, etc.) live in # the Supabase compose .env on the VPS — do NOT mix them with client vars. # Public URL of the self-hosted Supabase gateway (served by Caddy). SUPABASE_URL=https://supabase.example.com # Anon public key (safe to ship to clients). SUPABASE_ANON_KEY=replace_me # Deep-link scheme used for magic-link redirects. AUTH_REDIRECT_URL=chatapp://auth/callback