Integrations

• PostgreSQL databaseconfigured

  DATABASE_URL (postgres://… in production; pglite://./data/pglite locally)

• GitHub OAuth appsetup required

  GITHUB_CLIENT_ID + GITHUB_CLIENT_SECRET with callback URL <site>/api/auth/github/callback

• Credential encryption keyconfigured

  TOKEN_ENCRYPTION_KEY (32 bytes, base64 or hex). A development key is derived locally when unset.

• Session signing secretconfigured

  SESSION_SECRET (random string). A development secret is derived locally when unset.

• GitHub server token (higher sync rate limits)setup required

  GITHUB_SERVER_TOKEN (fine-grained token with public repository read access). Optional: unauthenticated sync is limited to 60 requests/hour.

• GitHub webhook secretsetup required

  GITHUB_WEBHOOK_SECRET; add a repository webhook for push + release events to <site>/api/webhooks/github. Optional: scheduled sync works without it.

• Scheduled jobsconfigured

  CRON_SECRET; Vercel Cron calls /api/cron/tick (vercel.json). Locally the dev server runs the job loop in-process.