Environment variables, explained
Everything we wish we knew before our first broken deploy. Short, practical, framework-agnostic.
What is a .env file? A developer's guide (2026)
A complete guide to .env files — what they are, how runtimes load them, why they matter, and how to use them safely across Node.js, Next.js, Django, and more.
10 .env best practices every team should follow
Rules for .env files: what to commit, what to rotate, how to structure secrets across dev, staging and production, and the mistakes that cause outages.
How to use dotenv: Node, React, Next.js & more
Every way to load a .env file: dotenv/config, Node's --env-file flag, Vite, Next.js, webpack, Django, Rails, Laravel and Go. Load order and overrides explained.
What is NEXT_PUBLIC_ in Next.js env variables?
The NEXT_PUBLIC_ prefix decides whether an env variable is shipped to the browser or kept on the server. Here's how it works, when to use it, and the traps.
Hide .env from git (and recover if committed)
Step-by-step: keep .env out of git from day one, and what to do when a secret leaks into your commit history. Includes rotation checklist.
How to fix .env file errors (complete troubleshooting)
The 12 most common .env file errors — missing values, duplicate keys, bad quotes, encoding issues, case sensitivity — with exact fixes for each.
GitHub Actions Secrets: Add, Use & Rotate (2026)
Add a secret in Settings, reference it with ${{ secrets.NAME }}, keep it masked and rotate it safely. Repo vs environment vs org secrets, plus OIDC.
Vercel Environment Variables: Setup & CLI (2026)
Add, pull and manage Vercel environment variables: Production vs Preview vs Development, Sensitive variables, vercel env pull and the CLI.