Claron
    Documentation
    ENVIRONMENT VARIABLESReviewed

    Environment Variables

    Manage the secrets and configuration your application needs to build and run. Claron provides a secure, encrypted vault for your environment variables.

    Add, edit, or remove a value

    1. Open the project → Settings → Build and locate its environment-variable editor

      You need permission to manage the project's build configuration.

    2. Add a name/value pair or paste the supported .env format

      Use the names expected by the app and do not paste unrelated local credentials.

    3. Review the editor for invalid or duplicated names and save the changes

      If the UI permits revealing a stored value, do so only when authorized; a masked field does not mean its value is unrecoverable to every permitted manager.

    4. Make a new build and open that new preview

      A previously built browser bundle cannot update a compiled variable when you only save a setting.

    5. Remove a value in the editor, save, and rebuild when it is no longer required

      Remove or rotate a compromised credential at its issuing service as well.

    Understand where the value is used

    TypeBehavior
    Build-timeRead by the build command; a change normally requires a new build.
    SSR/server runtimeRead by the application server if the selected hosting/runtime supports it. Check the framework's runtime expectations.
    Public browser variablePrefixes such as NEXT_PUBLIC_ and VITE_ can compile the value into public JavaScript. Encryption in a settings store does not make the compiled value secret.
    Build-tool secretKeep CLARON_API_KEY and deployment tokens in the build secret environment, without public frontend prefixes.

    Verify and troubleshoot

    Confirm the app behavior in the new build without printing secret values into logs. Check the name, selected project/environment, framework prefix, and time of use when a variable appears missing.

    Cannot find module generally requires a dependency/path check; it is not a reliable missing-variable diagnosis. For build errors, use Builds & Previews. For different staging and production targets, use Environments & Releases.

    ENVIRONMENT VARIABLE EDITOR

    The editor supports manual entry or bulk pasting from a .env file. Existing values stay hidden by default and can be revealed on demand.

    SECURITY ARCHITECTURE

    How we keep your secrets safe.

    Encrypted Vault

    Encryption
    All values are encrypted at rest using AES-256-GCM.
    Scope
    Variables are scoped strictly to the project they belong to.
    Injection
    Injected securely into the isolated build container at runtime.
    Value Privacy
    Saved values are hidden in the dashboard and must be explicitly revealed.

    TROUBLESHOOTING