Configure environment variables and secrets // NodeFlux Docs
Keep bot tokens, API keys, and connection strings out of your source code. NodeFlux documentation for free Minecraft, Node.js and application hosting.
Keep bot tokens, API keys, and connection strings out of your source code.
List the configuration values your application needs, such as PORT, BOT_TOKEN, DATABASE_URL, or a signing secret.
Add them through the service configuration or startup environment controls available in the manager.
Restart the service after changing configuration, then confirm in logs that required values are present without printing the values themselves.
Rotate a secret immediately if it was committed to a repository, pasted in chat, or shown in a screenshot.
Use a separate secret for each application and environment.
A .env file can be convenient for local development, but it must stay out of version control and be protected like a password.