Build-time variables

Decrypt before building when your app needs values during the build.

The main guide loads HELLO at server startup. For a value that should be fixed when you build, declare it static:

// src/env.js
import { defineEnvVars } from '@sveltejs/kit/env';

export const variables = defineEnvVars({
  HELLO: { static: true }
});

Keep the same $app/env/private import. Update the build script to decrypt .env.production before Vite starts:

{
  "scripts": {
    "build": "dotenvx run -f .env.production --strict -- vite build"
  }
}

Make DOTENV_PRIVATE_KEY_PRODUCTION available in your build environment as well as any runtime that needs it. An Enclaved Key assigned only to your server does not automatically give a separate build job access.

Run npm run build or pnpm build. Static values become part of the server build; changing them requires rebuilding. Keep build artifacts private.

Prerendered pages also run during the build. If a prerendered page needs HELLO, use this static declaration and build wrapper. Anything returned into generated HTML is public. See SvelteKit environment variables for static and public options.