Production Environment Variables
Set production variables in your hosting provider's secret manager. Use the canonical HTTPS app URL, a production-specific strong secret, the correct Google OAuth client, and the real backend URL. Register the exact production callback URI with Google. Redeploy after changes.
Production environment template
NEXTAUTH_URL=https://app.your-domain.example
NEXTAUTH_SECRET=unique_production_secret
GOOGLE_CLIENT_ID=production_client_id
GOOGLE_CLIENT_SECRET=production_client_secret
AUTH_API_URL=https://api.your-domain.example💡 Replace the example domains and values. Never commit real production secrets.