# ─── Etiya doc-to-lora UI — environment ────────────────────────────── # # Copy to `.env.local` and fill in. # `.env.local` is gitignored. Never commit the real token. # # Auth model: # - HF_TOKEN is read by Next.js server-side ONLY (no NEXT_PUBLIC_ prefix). # - Browser calls /api/proxy/* → Next server adds Authorization header # before forwarding to https://etiya-d2l-api.hf.space/. # - Token never reaches the browser. Safe in production. # # Required: HuggingFace write token with access to the Etiya/d2l-api Space. # Get from https://huggingface.co/settings/tokens HF_TOKEN=hf_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx # Optional: override backend URL (default points to production HF Space). D2L_API_URL=https://etiya-d2l-api.hf.space