Build error due to sensitive data in .gitignore file

[perry]

hi Laura,

you may want to store the sensitive data in an environment variable:

[Support Guide] Using environment variables on Netlify correctly

Last reviewed: August 2023 The preferred way to use environment variables in Netlify is to set them in our environment - be that in the Environment Variables settings UI (on the site’s “Build & Deploy settings” page), or via netlify.toml. You’ll want to choose the right pattern to meet your needs. Setting variables in our UI may be considered a bit more secure, since only people with access to the Netlify admin UI for your site can see them, rather than “anyone who can clone your repo!”. Thes…

also may be of interest:

What does the little "Public" badge mean, next to my environment variables? Can I put secret keys here?

I’m building a React app which will have a simple auth flow via a netlify function/lambda. The lambda will need a secret token, which I was going to supply via environment variable. Obviously I need the env var to be readable by the lambda, and NOT anywhere on the frontend or anywhere public. Ideally it wouldn’t even be present when building the frontend app, but so far everything I’ve read indicates that all env vars are present during both build and lambda runtime. I can live with that. Anyw…