Database Services
/service-patternsKnown service patterns for environment variable naming. Use these patterns to detect services and infer permission scopes.
<overview> Known service patterns for environment variable naming. Use these patterns to detect services and infer permission scopes. </overview> <database_services> ## Database Services | Pattern | Service | Permission Level | Notes | |---------|---------|------------------|-------| | DATABASE_URL | Generic DB | Critical | Full database access | | POSTGRES_* | PostgreSQL | Critical | Database credentials | | MYSQL_* | MySQL | Critical | Database credentials | | MONGODB_URI | MongoDB | Critical | Full database access | | REDIS_URL | Redis | High | Cache/session access | | SUPABASE_URL | Supabase | Medium | Project-URLs (public) | | SUPABASE_ANON_KEY | Supabase | Low | Public anonymous key | | SUPABASE_SERVICE_ROLE_KEY | Supabase | Critical | Bypasses RLS, full access | | PLANETSCALE_* | PlanetScale | Critical | Database credentials | | TURSO_* | Turso | Critical | Database credentials | | NEON_* | Neon | Critical | Database credentials | </databaseservices> <authenticationservices> ## Authentication Services | Pattern | Service | Permission Level | Notes | |---------|---------|------------------|-------| | JWT_SECRET | JWT | Critical | Token signing; full authentication bypass if leaked | | SESSION_SECRET | Sessions | Critical | Risk of session forgery | | NEXTAUTH_SECRET | NextAuth | Critical | Auth token signing | | NEXTAUTH_URL | NextAuth | Low | Callback URL configuration | | AUTH0_* | Auth0 | High | OAuth credentials | | CLERK_* | Clerk | High | Auth service credentials | | KINDE_* | Kinde | High | Auth service credentials | | OAUTH_* | Generic OAuth | High | OAuth client credentials | | GOOGLE_CLIENT_ID | Google OAuth | Medium | OAuth client ID (semi-public) | | GOOGLE_CLIENT_SECRET | Google OAuth | High | OAuth client secret | | GITHUB_CLIENT_* | GitHub OAuth | High | OAuth credentials | </authenticationservices> <paymentservices> ## Payment Services | Pattern | Service | Permission Level | Notes | |---------|---------|------------------|-------| | STRIPE_SECRET_KEY | Stripe | Critical | Full account access, can charge cards | | STRIPE_PUBLISHABLE_KEY | Stripe | Low | Public key for frontend | | STRIPE_WEBHOOK_SECRET | Stripe | High | Webhook signature verification | | PAYPAL_* | PayPal | Critical | Payment processing | | SQUARE_* | Square | Critical | Payment processing | | LEMONSQUEEZY_* | Lemon Squeezy | Critical | Payment/subscription | | PADDLE_* | Paddle | Critical | Payment processing | </paymentservices> <cloudservices> ## Cloud Services | Pattern | Service | Permission Level | Notes | |---------|---------|------------------|-------| | AWS_ACCESS_KEY_ID | AWS | Critical | Depends on IAM permissions | | AWS_SECRET_ACCESS_KEY | AWS | Critical | Full credentials | | AWS_REGION | AWS | Low | Region configuration | | S3_BUCKET | AWS S3 | Low | Bucket name only | | CLOUDFLARE_* | Cloudflare | High | CDN/DNS control | | VERCEL_* | Vercel | Medium | Deployment platform | | GCP_* / GOOGLE_* | Google Cloud | Critical | Service account access | | AZURE_* | Azure | Critical | Cloud credentials | | DO_* / DIGITALOCEAN_* | DigitalOcean | Critical | Infrastructure access | </cloudservices> <emailservices> ## Email Services | Pattern | Service | Permission Level | Notes | |---------|---------|------------------|-------| | SENDGRID_API_KEY | SendGrid | High | Can send emails as your domain | | MAILGUN_* | Mailgun | High | Email sending | | RESEND_API_KEY | Resend | High | Email sending | | POSTMARK_* | Postmark | High | Email sending | | SMTP_* | Generic SMTP | High | Email credentials | | EMAIL_SERVER_* | Generic | High | SMTP configuration | </emailservices> <storageservices> ## Storage Services | Pattern | Service | Permission Level | Notes | |---------|---------|------------------|-------| | CLOUDINARY_* | Cloudinary | Medium | Media storage | | UPLOADTHING_* | UploadThing | Medium | File uploads | | IMAGEKIT_* | ImageKit | Medium | Image CDN | | MINIO_* | MinIO | High | S3-compatible storage | </storageservices> <analyticsmonitoring> ## Analytics & Monitoring | Pattern | Service | Permission Level | Notes | |--
