Environment Variables

The boilerplate is configured entirely through environment variables. Copy the template and fill in the values you need:

cp .env.example .env.local

Only the Firebase web credentials and the email sign-in redirect URL are required for a working default deployment. Everything else is optional and feature-gated: leaving an optional variable empty disables that feature gracefully, with no crash and no build failure. The store's default mode is quote-based (browse → cart → submit a quote request), so payments, transactional email, and SQL backends all stay off until you opt in.

Quick reference

Firebase web credentials

Firebase is the default identity provider and the default commerce backend. These seven values come from the Firebase console → Project settings → Your apps. They are NEXT_PUBLIC_* because Firebase web credentials are meant to be public — access control lives in your Firestore security rules, not in these keys.

Email sign-in redirect

The storefront uses Firebase passwordless (email-link) sign-in. After a user clicks the link in their inbox, Firebase redirects them back to this absolute URL to complete authentication.

Resend email notifications (optional)

Transactional email is powered by Resend and is entirely optional. When RESEND_API_KEY is empty, the POST /api/quotes/notify and POST /api/notifications/status endpoints skip sending and respond { skipped: true } — the quote flow itself is unaffected.

The fallbacks are applied server-side in src/app/api/quotes/notify/route.ts:

const from = process.env.RESEND_FROM_EMAIL || "onboarding@resend.dev";
const adminRecipient =
  process.env.QUOTE_NOTIFICATION_EMAIL || siteConfig.contact.email;

Seed service account (optional)

npm run seed (see scripts/seed.mjs) needs Firebase Admin credentials to write seed data into Firestore. Point this at a service-account JSON file downloaded from the Firebase console → Project settings → Service accounts → Generate new private key.

Stripe Checkout (optional)

Stripe adds a real "Checkout" button alongside the quote flow. The Stripe client is instantiated lazily (src/lib/stripe.ts), so when STRIPE_SECRET_KEY is unset the store stays quote-only and the Checkout button simply does not appear.

export function isStripeEnabled(): boolean {
  return Boolean(process.env.STRIPE_SECRET_KEY);
}

Commerce backend selection

The commerce data layer (src/lib/commerce) is backend-agnostic. Firebase is the default and runs entirely client-side. Selecting a SQL backend routes the browser through the /api/commerce RPC route, where a privileged server adapter runs. Firebase Auth stays the identity provider for every backend — its ID token is verified server-side via firebase-admin, so the FIREBASE_SERVICE_ACCOUNT* credentials are required for the SQL backends too.

Two variables must agree:

• firebase (or unset): pure client-side Firebase — no RPC route, no SQL variables needed.
• supabase | postgres: set both variables to the same value and provide the matching credentials below.

Supabase adapter

Set when COMMERCE_BACKEND=supabase. Values come from Supabase → Project Settings → API. See the Supabase adapter guide.

Postgres / Prisma adapter

Set when COMMERCE_BACKEND=postgres. Read by both the Prisma CLI (prisma.config.ts) and the runtime adapter (src/lib/commerce/server/prisma.ts). See the Postgres/Prisma adapter guide.

Related