Environment Variables & Runtime Secrets
Securely inject API keys, database connection strings, and public framework variables into your build and runtime containers.
Security & Secret Management
Never commit sensitive credentials such as database passwords, Stripe keys, or private API secrets to version control. AcadSites provides an encrypted Secrets Store where you can define key-value environment variables that are securely injected at build and runtime.
Public vs Private Environment Variables
Modern frontend frameworks handle environment variables differently depending on whether they are compiled into client bundles or evaluated on the server:
| Type | Prefix Convention | Accessibility | Example |
|---|---|---|---|
| Client-Exposed | NEXT_PUBLIC_* or VITE_* | Bundled into browser JavaScript | VITE_SUPABASE_URL |
| Server-Only Secret | No prefix (standard) | Evaluated strictly in server runtime | DATABASE_URL, RESEND_KEY |
The Quick-Redeploy Bridge
When you update or save environment variables in AcadSites, a floating Quick-Redeploy banner appears. Clicking "Redeploy Now" immediately launches a fresh build, ensuring your new secrets are active without manual tab switching.
For static frameworks (like Vite), public variables are baked during build time. Always redeploy after changing VITE_* or NEXT_PUBLIC_* variables.
Ready to experience zero-overage cloud hosting?
Deploy your React, Next.js, or Node.js application in under 60 seconds with automated SSL.