Default env values
Values you set here auto-populate every new deployment. The wizard still lets you override per install — this is just the "most of the time" answer.
Core
Environment + API versioning.
Logger level.
URLs
Public URLs (auto-filled from domains).
Optional storefront origin.
Secrets
Session and webhook signing secrets (generated).
Session cookie name.
Uploads
Upload directory + file-size limits.
Max upload size in bytes.
Media storage (R2 / S3)
Where product images and other media are stored.
Cloudflare R2 account ID.
R2 access key.
R2 secret key.
Bucket where media is stored.
Public URL prefix for R2 objects.
Folder inside the bucket for this deployment.
AI providers
OpenAI and DeepSeek keys.
OpenAI API key.
DeepSeek API key.
Google Analytics
GA4 analytics credentials.
GA4 property ID for analytics pulls.
Meta / WhatsApp
Meta app + embedded signup + webhook verify.
Meta application ID.
Meta app secret.
Meta embedded-signup configuration ID.
Verify token for the Meta webhook handshake.
Webhook router
Multi-tenant webhook router settings.
Webhook router base URL.
Tenant ID registered with the webhook router.
Tenant secret for the webhook router.
SMTP (required)
Outbound email — order confirmations, resets, etc.
SMTP server hostname.
SMTP port (587 for TLS, 465 for SSL).
SMTP username.
SMTP password or app password.
From address on outgoing email.