# Frontend environment variables are intentionally unsupported. # # API traffic must go through same-origin /api. # Public runtime settings must come from application APIs. # Provider keys and OSS credentials must stay on the server.