Deploying build - enviroment variables are hardcoded

[cemalokten]

I am deploying my application to fly.io, but finding that the env variables are hardcoded into the build/server/index.js file.

What is the best way to use dynamic enviroment variables and not have them hardcoded?

Serverside env variables come out like this: replacethiswithsecretkey

Here is how I am using a TURNSTILE_SECRET_KEY for example:

async function validateTurnstile(request: Request, token: string) {
  invariant(
    process.env.TURNSTILE_SECRET_KEY,
    'TURNSTILE_SECRET_KEY is required',
  )

  const ip =
    request.headers.get('CF-Connecting-IP') ||
    request.headers.get('X-Forwarded-For') ||
    request.headers.get('X-Real-IP') ||
    '127.0.0.1'

  const form_data = new URLSearchParams()
  form_data.append('secret', process.env.TURNSTILE_SECRET_KEY)
  form_data.append('response', token)
  form_data.append('remoteip', ip)

  try {
    const response = await fetch(
      'https://challenges.cloudflare.com/turnstile/v0/siteverify',
      {
        method: 'POST',
        headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
        body: form_data,
      },
    )

    if (!response.ok) {
      throw new Error(`HTTP error! Status: ${response.status}`)
    }

    const result = await response.json()

    if (!result.success) {
      throw new Error(
        `Failed to validate Turnstile response: ${result.error_codes?.join(', ') || 'Unknown error'}`,
      )
    }

    return result
  } catch (error) {
    console.error('TURNSTILE_REQUEST_ERROR', error)
    throw new Error('Failed to process Turnstile validation request')
  }
}

export { validateTurnstile }