import { z } from "zod"; /** * Specify your server-side environment variables schema here. This way you can ensure the app isn't * built with invalid env vars. */ const server = z.object({ DATABASE_URL: z.string().url(), NODE_ENV: z.enum(["development", "test", "production"]), NEXTAUTH_SECRET: process.env.NODE_ENV === "production" ? z.string().min(1) : z.string().min(1).optional(), NEXTAUTH_URL: z.preprocess( // This makes Vercel deployments not fail if you don't set NEXTAUTH_URL // Since NextAuth.js automatically uses the VERCEL_URL if present. (str) => process.env.VERCEL_URL ?? str, // VERCEL_URL doesn't include `https` so it cant be validated as a URL process.env.VERCEL ? z.string().min(1) : z.string().url() ), // Add `.min(1) on ID and SECRET if you want to make sure they're not empty GOOGLE_CLIENT_ID: z.string(), GOOGLE_CLIENT_SECRET: z.string(), GITHUB_ID: z.string(), GITHUB_SECRET: z.string(), AWS_ENDPOINT: z.string(), AWS_REGION: z.string(), AWS_KEY_ID: z.string(), AWS_SECRET_ACCESS_KEY: z.string(), AWS_BUCKET_NAME: z.string(), STRIPE_SECRET_KEY: z.string(), STRIPE_WEBHOOK_SECRET: z.string(), STRIPE_MONTHLY_PRICE_ID: z.string(), STRIPE_ANNUAL_PRICE_ID: z.string(), POSTHOG_PROXY_PATH: z.string(), UPSTASH_REDIS_REST_URL: z.string(), UPSTASH_REDIS_REST_TOKEN: z.string(), }); /** * Specify your client-side environment variables schema here. This way you can ensure the app isn't * built with invalid env vars. To expose them to the client, prefix them with `NEXT_PUBLIC_`. */ const client = z.object({ // NEXT_PUBLIC_CLIENTVAR: z.string().min(1), NEXT_PUBLIC_STRIPE_PUBLISHABLE_KEY: z.string(), NEXT_PUBLIC_CRISP_WEBSITE_ID: z.string(), NEXT_PUBLIC_POSTHOG_KEY: z.string(), NEXT_PUBLIC_POSTHOG_HOST: z.string(), NEXT_PUBLIC_POSTHOG_PROXY_HOST: z.string(), }); /** * You can't destruct `process.env` as a regular object in the Next.js edge runtimes (e.g. * middlewares) or client-side so we need to destruct manually. * * @type {Record | keyof z.infer, string | undefined>} */ const processEnv = { DATABASE_URL: process.env.DATABASE_URL, NODE_ENV: process.env.NODE_ENV, NEXTAUTH_SECRET: process.env.NEXTAUTH_SECRET, NEXTAUTH_URL: process.env.NEXTAUTH_URL, // NEXT_PUBLIC_CLIENTVAR: process.env.NEXT_PUBLIC_CLIENTVAR, GOOGLE_CLIENT_ID: process.env.GOOGLE_CLIENT_ID, GOOGLE_CLIENT_SECRET: process.env.GOOGLE_CLIENT_SECRET, GITHUB_ID: process.env.GITHUB_ID, GITHUB_SECRET: process.env.GITHUB_SECRET, AWS_ENDPOINT: process.env.AWS_ENDPOINT, AWS_REGION: process.env.AWS_REGION, AWS_KEY_ID: process.env.AWS_KEY_ID, AWS_SECRET_ACCESS_KEY: process.env.AWS_SECRET_ACCESS_KEY, AWS_BUCKET_NAME: process.env.AWS_BUCKET_NAME, NEXT_PUBLIC_STRIPE_PUBLISHABLE_KEY: process.env.NEXT_PUBLIC_STRIPE_PUBLISHABLE_KEY, STRIPE_SECRET_KEY: process.env.STRIPE_SECRET_KEY, STRIPE_WEBHOOK_SECRET: process.env.STRIPE_WEBHOOK_SECRET, STRIPE_MONTHLY_PRICE_ID: process.env.STRIPE_MONTHLY_PRICE_ID, STRIPE_ANNUAL_PRICE_ID: process.env.STRIPE_ANNUAL_PRICE_ID, NEXT_PUBLIC_CRISP_WEBSITE_ID: process.env.NEXT_PUBLIC_CRISP_WEBSITE_ID, NEXT_PUBLIC_POSTHOG_KEY: process.env.NEXT_PUBLIC_POSTHOG_KEY, NEXT_PUBLIC_POSTHOG_HOST: process.env.NEXT_PUBLIC_POSTHOG_HOST, POSTHOG_PROXY_PATH: process.env.POSTHOG_PROXY_PATH, NEXT_PUBLIC_POSTHOG_PROXY_HOST: process.env.NEXT_PUBLIC_POSTHOG_PROXY_HOST, UPSTASH_REDIS_REST_URL: process.env.UPSTASH_REDIS_REST_URL, UPSTASH_REDIS_REST_TOKEN: process.env.UPSTASH_REDIS_REST_TOKEN, }; // Don't touch the part below // -------------------------- const merged = server.merge(client); /** @typedef {z.input} MergedInput */ /** @typedef {z.infer} MergedOutput */ /** @typedef {z.SafeParseReturnType} MergedSafeParseReturn */ let env = /** @type {MergedOutput} */ (process.env); if (!!process.env.SKIP_ENV_VALIDATION == false) { const isServer = typeof window === "undefined"; const parsed = /** @type {MergedSafeParseReturn} */ ( isServer ? merged.safeParse(processEnv) // on server we can validate all env vars : client.safeParse(processEnv) // on client we can only validate the ones that are exposed ); if (parsed.success === false) { console.error( "❌ Invalid environment variables:", parsed.error.flatten().fieldErrors ); throw new Error("Invalid environment variables"); } env = new Proxy(parsed.data, { get(target, prop) { if (typeof prop !== "string") return undefined; // Throw a descriptive error if a server-side env var is accessed on the client // Otherwise it would just be returning `undefined` and be annoying to debug if (!isServer && !prop.startsWith("NEXT_PUBLIC_")) throw new Error( process.env.NODE_ENV === "production" ? "❌ Attempted to access a server-side environment variable on the client" : `❌ Attempted to access server-side environment variable '${prop}' on the client` ); return target[/** @type {keyof typeof target} */ (prop)]; }, }); } export { env };