# Copy this file to .env.local and fill in real values.
# .env.local is gitignored — never commit real keys.

# Project Settings -> API -> Project URL
NEXT_PUBLIC_SUPABASE_URL=

# Project Settings -> API -> anon public key. Safe to expose to the
# browser: every query it makes is filtered by RLS.
NEXT_PUBLIC_SUPABASE_ANON_KEY=

# Project Settings -> API -> service_role key. NEVER exposed to the
# browser. Only imported in server-only files (src/lib/supabase/service.ts),
# used only inside /app/api/* route handlers. Bypasses RLS entirely.
SUPABASE_SERVICE_ROLE_KEY=