Environment Checklist

Complete checklist of environment variables required for production deployment.

Required

Variable	Description	Security
NUXT_PUBLIC_SUPABASE_URL	Supabase project URL	Public
NUXT_PUBLIC_SUPABASE_KEY	Supabase anon key	Public
SUPABASE_SERVICE_KEY	Supabase service role key	Secret
N8N_BASE_URL	N8N instance URL	Internal
N8N_WEBHOOK_SECRET	Webhook authentication secret	Secret

Optional

Variable	Description	Default
NUXT_PUBLIC_SITE_URL	Production site URL	http://localhost:3000
N8N_WEBHOOK_SPEC_PROCESSOR	Spec processing webhook path	/webhook/pip-ai-spec-upsert
N8N_WEBHOOK_PIP_PROCESSOR	PIP processing webhook path	/webhook/pip-ai-pip-processor
N8N_WEBHOOK_FLOOR_PLAN_PROCESSOR	Floor plan webhook path	/webhook/pip-ai-floor-plan-processor
N8N_WEBHOOK_NANO_BANANA_PROCESSOR	AI image webhook URL	—
N8N_NANO_BANANA_SECRET	Nano Banana webhook secret	—

Security Checklist

• [ ] SUPABASE_SERVICE_KEY is stored as a secret (not committed to git)
• [ ] N8N_WEBHOOK_SECRET is stored as a secret
• [ ] NUXT_PUBLIC_DEV_AUTH_BYPASS is not set or set to false
• [ ] All secret values are different from development values
• [ ] Supabase RLS policies are applied and tested
• [ ] Storage bucket policies restrict access appropriately
• [ ] N8N instance is secured (authentication enabled)