Environment variables#

Environment specific variables like database connection details, API keys and other server configuration should be kept outside the application code in a separate .env file. This file is stored outside of the web root (i.e. not in the /public/ folder) and kept out of version control for security reasons.

For more information see our docs on Environment Management.

Data which isn't sensitive that can be in version control but is mostly static such as constants is best suited to be included through the Configuration API based on the standard environment types (dev / test / live).