# .env (committed to git) DATABASE_URL=postgresql://user:pass@production-db:5432/myapp API_BASE_URL=https://api.production.com
Failure to add this entry is a . Any developer committing .env.local to a repository exposes all local API keys, database credentials, and service tokens. .env.local
# Accessible via import.meta.env.VITE_API_URL VITE_API_URL="https://api.local" Use code with caution. 3. Node.js (Vanilla) .env.local
CRA uses .env and .env.local with the REACT_APP_ prefix for client-exposed variables. Support for environment-specific files like .env.development is available but less explicit. .env.local