Env and secrets
What self-hosters and Action integrators need to configure.
API
| Name | Purpose |
|---|---|
LAYDEBUG_PROJECT_API_KEY | Raw project key (hashed at rest) |
BETTER_AUTH_SECRET | Better Auth secret (≥32 chars) |
BETTER_AUTH_URL | Public API URL (HTTPS in production) |
DATABASE_URL | Postgres (required in production) |
SUPABASE_URL / SUPABASE_SECRET_KEY | Storage signing |
SUPABASE_STORAGE_BUCKET | Default laydebug-state |
GITHUB_ISSUE_TOKEN / GITHUB_REPO | Open issues (owner/name) |
GITHUB_CLIENT_ID / GITHUB_CLIENT_SECRET | Optional GitHub OAuth for a future console |
ALLOW_INSECURE_LOCAL_ADAPTERS | PGlite + memory storage (forbidden in production) |
Integrator Action secrets
| Name | Purpose |
|---|---|
OPENAI_API_KEY / OPENROUTER_API_KEY / ANTHROPIC_API_KEY | Suggested-fix models |
SUPABASE_URL / SUPABASE_SECRET_KEY | Download consented snapshots |
TRIAGE_APK_URL / TRIAGE_APK_SHA256 | Explicit APK (checksum optional) |
EXPO_TOKEN | Fallback: latest finished EAS Android build |
Website clients use the same tRPC/HTTP contract with x-laydebug-key. There is no web SDK in v1.