Nextjs Guideline: Environment — Use .env.local for secrets. Description: Local env file for development secrets. Do: .env.local gitignored. Don't: Secrets in .env committed. Good Example: .env.local with secrets. Bad Example: .env with DATABASE_PASSWORD. Severity: High. Docs: .