This page is for developers working on the Vinum E-Label application itself.
Required variables
Both values are safe to expose to the browser — access control is enforced by row-level security on the database, not by keeping these values secret.
Local setup
.env or .env.* files.
Production setup
Configure the same variables in the hosting platform that builds the app (Cloudflare Pages). Server-side secrets — Stripe keys, webhook secrets — live in Supabase edge function configuration, never inVITE_* variables.
Supabase services in use
- Authentication (including magic-link sign-in)
- PostgreSQL with row-level security
- Storage (QR code SVGs)
- Edge functions (billing webhooks, label import)

