Environment Variables Reference
Authoritative specifications for mobile client build-time configuration, Deno Edge Function secrets, and Supabase Vault.
Environment Variables Reference
Attendrix enforces strict separation between public client build configurations and encrypted backend infrastructure secrets. Client builds must never bundle administrative service keys.
Client applications bundle only the SUPABASE_URL and public SUPABASE_ANON_KEY. All elevated database mutations, PGMQ queue consumption, and Google OAuth Vault operations require the service_role key, which is restricted exclusively to Deno Edge Functions and database triggers.
Flutter Mobile Application Environments
Configured via Flutter build flavors or assets/environment_values/environment.json:
| Field / Prop | Type | Default | Description |
|---|---|---|---|
SUPABASE_URLrequired | string (URL) | https://YOUR_SUPABASE_PROJECT_REF.supabase.co | Base HTTPS URL of the Supabase PostgreSQL and PostgREST endpoint. |
SUPABASE_ANON_KEYrequired | string (JWT) | — | Public anonymous JWT key passed in the 'apikey' and 'Authorization' headers for PostgREST queries. |
oneSignalAppIdrequired | string (UUID) | 00000000-0000-0000-0000-000000000000 | Target OneSignal application identifier used by the mobile SDK to register push notification subscriptions. |
orsAPIKEY | string | — | Optional OpenRouteService API key used during dataset generation and fallback routing queries. |
Supabase Edge Functions Environment Secrets
Managed securely in the Supabase Cloud dashboard and injected into Deno serverless runtimes:
| Field / Prop | Type | Default | Description |
|---|---|---|---|
SUPABASE_URLrequired | string (URL) | — | Internal Supabase API gateway URL used by createClient within Deno isolates. |
SUPABASE_SERVICE_ROLE_KEYrequired | string (JWT) | — | Elevated administrator key granting complete bypass of RLS for queue reading, vault secret retrieval, and event logging. |
GOOGLE_CLIENT_IDrequired | string | — | Google Cloud OAuth 2.0 client ID for web server application authorization. |
GOOGLE_CLIENT_SECRETrequired | string | — | Google Cloud OAuth 2.0 client secret used in authorization code exchange. |
GOOGLE_REDIRECT_URIrequired | string (URL) | — | Callback endpoint registered with Google Cloud Console (e.g. https://<project>.supabase.co/functions/v1/google-calendar-auth). |
FRONTEND_REDIRECT_URIrequired | string (URI) | attendrix://attendrix.app/google-calendar | Deep-link URI redirecting back to the mobile application upon OAuth consent completion. |
ONESIGNAL_APP_IDrequired | string (UUID) | — | Target OneSignal App ID for backend push broadcast dispatches. |
ONESIGNAL_API_KEYrequired | string | — | Rest API authorization key used to authenticate HTTP POST dispatches to https://onesignal.com/api/v1/notifications. |
NASA_API_KEY | string | DEMO_KEY | API key for querying NASA Astronomy Picture of the Day (APOD) endpoints. |
Was this page helpful?
Your feedback directly guides the engineering documentation roadmap.