Environment Variables - Streamly

Never commit .env.local or .dev.vars. Never expose SUPABASE_SERVICE_ROLE_KEY, TENANT_SECRETS_MASTER_KEY, STREAMLY_CRON_SECRET, STREAMLY_INITIAL_ADMIN_EMAIL, or STREAMLY_INITIAL_ADMIN_PASSWORD to the browser.

Copy templates:

cp .env.example .env.local          # local Next.js
cp .dev.vars.example .dev.vars      # Cloudflare preview

Core URLs

Variable	Required	Description
`NEXT_PUBLIC_APP_URL`	Yes	Canonical public URL
`NEXT_PUBLIC_PLATFORM_HOST`	Yes	Platform host (no scheme)
`NEXT_PUBLIC_STREAMLY_API_BASE`	Yes	Usually `{APP_URL}/api/v1`

Supabase

Variable	Required	Description
`NEXT_PUBLIC_SUPABASE_URL`	Yes	Project URL
`NEXT_PUBLIC_SUPABASE_ANON_KEY`	Yes	Anon key
`SUPABASE_SERVICE_ROLE_KEY`	Yes	Server-only

Server secrets

Variable	Required	Description
`TENANT_SECRETS_MASTER_KEY`	Yes	32-byte key (`openssl rand -base64 32`)
`STREAMLY_CRON_SECRET`	Yes	Authenticates `/api/internal/jobs/run`

Operator bootstrap

Variable	Required in prod	Description
`STREAMLY_INITIAL_ADMIN_EMAIL`	Yes (first install)	First operator email. Server-only. Do not use `NEXT_PUBLIC_`.
`STREAMLY_INITIAL_ADMIN_PASSWORD`	Yes (first install)	16+ characters. Server-only. Remove after the first operator exists.
`ENABLE_DEMO`	No	Public CodeCanyon preview only. Never enable on a customer or production deployment

Email (optional)

Variable	Required in prod	Description
`RESEND_API_KEY`	No	Viewer notifications / receipts
`STREAMLY_FROM_EMAIL`	Recommended when sending email	From header

Optional product

Variable	Description
`TMDB_API_TOKEN`	Server-side metadata (never expose to Flutter/browsers)
`PUBLIC_CATALOG_TENANT_SLUG` / `DEV_TENANT_SLUG`	Pin default tenant
`STREAMLY_LIVE_TMDB_HYDRATE`	Live title hydrate (off by default)
`STREAMLY_IMAGE_PROXY` / `NEXT_PUBLIC_STREAMLY_IMAGE_PROXY`	Poster proxy via `/api/v1/media/tmdb`

Cloudflare preview (`.dev.vars`)

Variable	Description
`NEXTJS_ENV`	Set to `development` for `pnpm run preview:cloudflare`

Payments & analytics

Configured through /admin/plugins after install - Stripe / PayPal / bank transfer credentials, analytics measurement IDs, etc. Not core .env.example keys. See Plugins and Payments / Billing.

Cloudflare for SaaS custom-hostname env vars (CLOUDFLARE_ACCOUNT_ID, zone, API token, fallback host) were removed - customer custom domains are not supported.