如何配置环境变量

const dbHost = process.env.DB_HOST       // 数据库地址
const apiKey = process.env.STRIPE_API_KEY // 支付 API 密钥
const nodeEnv = process.env.NODE_ENV     // 运行环境标识

export default {
  async fetch(request: Request, env: Env, ctx: ExecutionContext) {
    const dbHost = env.DB_HOST
    const apiKey = env.STRIPE_API_KEY
    return new Response(`${dbHost} / ${apiKey}`)
  }
}

# .env.example
DATABASE_URL=your_database_url_here
REDIS_URL=redis://localhost:6379
STRIPE_API_KEY=sk_test_your_stripe_key
NEXT_PUBLIC_APP_URL=http://localhost:3000

# GitHub Actions 示例
env:
  DATABASE_URL: postgresql://test:test@localhost:5432/test_db
  REDIS_URL: redis://localhost:6379
  NODE_ENV: test

# ✅ 好：前缀清晰，分组明确
DB_HOST=localhost
DB_PORT=5432
DB_NAME=myapp_production
REDIS_URL=redis://localhost:6379
STRIPE_API_KEY=sk_live_xxxxx
AWS_S3_BUCKET=my-assets
NEXT_PUBLIC_APP_URL=https://example.com
 
# ❌ 差：含义不明，无法分组
HOST=localhost
KEY=xxxxx
URL=redis://...
SECRET=abc123

# .gitignore
.env
.env.local
.env.production
*.env.local

chmod 600 .env

// env.ts — 启动时校验
const REQUIRED_VARS = [
  'DATABASE_URL',
  'REDIS_URL',
  'STRIPE_API_KEY',
] as const
 
function validateEnv() {
  const missing = REQUIRED_VARS.filter(key => !process.env[key])
  if (missing.length > 0) {
    throw new Error(
      `Missing required environment variables: ${missing.join(', ')}`
    )
  }
}
 
// 在应用入口点调用
validateEnv()

// ❌ 绝对不要这样做
console.log('Config:', process.env)
console.log('API Key:', process.env.STRIPE_API_KEY)
 
// ✅ 只记录必要的非敏感信息
console.log('Environment:', process.env.NODE_ENV)
console.log('Database host:', process.env.DB_HOST) // 不含密码

# 添加变量（交互式）
vercel env add STRIPE_API_KEY production
 
# 拉取变量到本地
vercel env pull .env.local
 
# 列出所有变量
vercel env ls

# 通过 cURL 批量配置
curl --request POST \
  --url https://api.vercel.com/v10/projects/<project-id>/env \
  --header "Authorization: Bearer $VERCEL_TOKEN" \
  --data '[{
    "key": "STRIPE_API_KEY",
    "value": "sk_live_xxxxx",
    "target": ["production"]
  }]'

# 创建敏感变量
curl --request POST \
  --url https://api.vercel.com/v10/projects/<project-id>/env \
  --header "Authorization: Bearer $VERCEL_TOKEN" \
  --data '[{
    "key": "STRIPE_SECRET",
    "value": "sk_live_xxxxx",
    "type": "sensitive",
    "target": ["production"]
  }]'

# wrangler.toml
[vars]
MY_VAR = "plain-text-value"
API_ENDPOINT = "https://api.example.com"

# 设置加密密钥（交互式输入）
wrangler secret put STRIPE_API_KEY
 
# 列出已设置的密钥（只显示名称，不显示值）
wrangler secret list
 
# 删除密钥
wrangler secret delete STRIPE_API_KEY

// 定义类型
interface Env {
  MY_VAR: string          // 普通变量
  STRIPE_API_KEY: string  // 加密密钥
  DB: D1Database          // D1 数据库绑定
}
 
export default {
  async fetch(request: Request, env: Env, ctx: ExecutionContext) {
    // 普通变量和加密密钥通过相同方式访问
    const endpoint = env.API_ENDPOINT
    const apiKey = env.STRIPE_API_KEY
 
    return new Response(`Endpoint: ${endpoint}`)
  }
}

# .dev.vars — 不提交到 Git
STRIPE_API_KEY=sk_test_xxxxx
DATABASE_URL=postgresql://localhost:5432/dev_db

# wrangler.toml
name = "my-worker"
 
[vars]
API_ENDPOINT = "https://api.example.com"
 
# 预发布环境
[env.staging]
name = "my-worker-staging"
[env.staging.vars]
API_ENDPOINT = "https://staging-api.example.com"
 
# 生产环境
[env.production]
name = "my-worker"
[env.production.vars]
API_ENDPOINT = "https://prod-api.example.com"

# .env.local（不提交到 Git）
STRIPE_API_KEY=sk_test_4eC39HqLyjWDarjtT1zdp7dc
STRIPE_WEBHOOK_SECRET=whsec_test_xxxxx
DATABASE_URL=postgresql://localhost:5432/ai_writer_dev
NEXT_PUBLIC_APP_URL=http://localhost:3000

// lib/env.ts
const requiredInProduction = [
  'STRIPE_API_KEY',
  'STRIPE_WEBHOOK_SECRET',
  'DATABASE_URL',
] as const
 
export function validateProductionEnv() {
  if (process.env.NODE_ENV !== 'production') return
 
  const missing = requiredInProduction.filter(key => !process.env[key])
  if (missing.length > 0) {
    throw new Error(`Production env missing: ${missing.join(', ')}`)
  }
}
 
// app/layout.tsx 或 server.ts 入口调用
validateProductionEnv()

// api/stripe.ts (Vercel Serverless Function)
import Stripe from 'stripe'
 
const stripe = new Stripe(process.env.STRIPE_API_KEY!)
 
export default async function handler(req: Request) {
  const session = await stripe.checkout.sessions.create({ /* ... */ })
  return Response.json(session)
}

// worker.ts (Cloudflare Worker)
interface Env {
  STRIPE_API_KEY: string
}
 
export default {
  async fetch(request: Request, env: Env) {
    const stripe = new Stripe(env.STRIPE_API_KEY)
    const session = await stripe.checkout.sessions.create({ /* ... */ })
    return Response.json(session)
  }
}