Environment variables

Halo exposes environment variables to your build container, your runtime, or both. Values are encrypted at rest and decrypted only at the edge.

Set a variable

halo env add DATABASE_URL postgres://...

By default the variable is available to all environments (production, preview, development).

Scope it:

halo env add DATABASE_URL postgres://prod... --env production
halo env add DATABASE_URL postgres://stage... --env preview

Read variables

In your code, just read process.env:

const url = process.env.DATABASE_URL;

Edge functions get the same process.env shape regardless of runtime — Halo wires it up before your handler runs.

Encrypted from rest to runtime

Reading variables programmatically

halo env list --env production --json

import { Halo } from "@halo/sdk";
const halo = new Halo({ token: process.env.HALO_TOKEN });
const vars = await halo.env.list({ env: "production" });