如何在 Heroku 的 React 项目上处理生产环境变量

Question

I have my Heroku connected to Github and my react project has a.env file with my Firebase config.

I don't upload the.env to github for security reasons.

But then, it doesn't get uploaded to Heroku and my project doesn't work. Or should it work anyway? Without the.env it doesn't have access to the config like the apikey.

So should I upload the.env file to Heroku? Is that safe?

How am I supossed to handle this?

Answer 1

You can set environment variables on Heroku, see:

---

Reactjs is typically a client side framework. You are usually not doing SSR. Are you certain you are doing SSR? Because if are serving the static html,js,css files people already have access to your firebase config by looking at the browser source.