Security

SECURITY.md

Security Guidelines

Environment Variables

CRITICAL: Never commit .env files to version control!

Setup Instructions:

Set environment variables in your deployment platform
Never commit .env files to version control
Use the deployment guide in DEPLOYMENT.md

Required Environment Variables:

See DEPLOYMENT.md for complete list of required environment variables.

Deployment:

Use environment variables or secrets management in production
Never hardcode credentials in source code
Rotate keys regularly

There aren’t any published security advisories