Status. Proposed design only. Nothing in this vault is DG client approval. No application, service or test has been executed; every scenario is Not executed. Fees and dates are open.

Environment configuration

Variable names only. Values never appear in the repository except harmless local placeholders in .env.example. Names are Proposed and are finalised when apps/ exists.

Name	Purpose	Environments
GGA_ENV	local, staging or production label	all
DATABASE_URL	PostgreSQL connection	all, separate per environment
SESSION_SECRET	Session signing	all, separate per environment
APP_BASE_URL	Absolute links in email	all
IDENTITY_PROVIDER and provider-specific names	Identity port adapter	Blocked by Q09
EMAIL_PROVIDER and provider-specific names	Email port adapter	Blocked by Q09
SMTP_HOST, SMTP_PORT	Local mail sink only	local

Rules

Separate data and credentials for local, staging and production. Staging uses synthetic or expressly approved sanitised examples. No real DG or member data until DG’s data policy exists. Safe failure messages never print configuration (T38).

Change history

Date	Change
2026-10-20	Created (bootstrap Phase 2)