Configuration

Configuration layers

1. Frontend runtime (apps/ship)
2. API runtime (apps/ship-api)
3. Auth and OAuth
4. Billing and webhooks
5. Storage and AI providers

Critical variables

• Auth: BETTER_AUTH_SECRET, BETTER_AUTH_URL, GITHUB_*, GOOGLE_*
• Data: DATABASE_URL, REDIS_URL
• Billing: STRIPE_SECRET_KEY, STRIPE_WEBHOOK_SECRET
• Stripe prices: STRIPE_PRICE_SUB_*, STRIPE_PRICE_CREDITS_* (or use lookup-key fallback via seeded lookup:xxx refs)
• Storage: BETTER_UPLOAD_PROVIDER, S3_*
• Public URLs: NEXT_PUBLIC_SITE_URL, NEXT_PUBLIC_SERVER_URL

Safety checklist

• Do not store production secrets in plain text files.
• Keep callback URLs aligned with the deployment domain.
• Verify staging and production webhook secrets are isolated.