[{"data":1,"prerenderedAt":175},["ShallowReactive",2],{"blog-blueprints/lovable-vercel":3},{"id":4,"title":5,"body":6,"category":155,"date":156,"dateModified":156,"description":157,"draft":158,"extension":159,"faq":160,"featured":158,"headerVariant":161,"image":160,"keywords":160,"meta":162,"navigation":163,"ogDescription":164,"ogTitle":160,"path":165,"readTime":166,"schemaOrg":167,"schemaType":168,"seo":169,"sitemap":170,"stem":171,"tags":172,"twitterCard":173,"__hash__":174},"blog/blog/blueprints/lovable-vercel.md","Lovable + Vercel Security Blueprint",{"type":7,"value":8,"toc":147},"minimark",[9,20,24,30,35,50,54,63,67,72,75,78,81,84,87,123,135],[10,11,12],"blueprint-summary",{},[13,14,15,19],"p",{},[16,17,18],"strong",{},"To secure a Lovable + Vercel deployment,"," you need to: (1) move all secrets to Vercel's environment variables dashboard, (2) add security headers in vercel.json, (3) use environment scoping to separate production from preview, and (4) ensure no hardcoded credentials in code. This blueprint covers deployment configuration and header security.",[21,22],"blueprint-meta",{"time":23},"1 hour",[25,26,27],"tldr",{},[13,28,29],{},"Deploying Lovable apps to Vercel requires proper environment variable configuration and security headers. Move all secrets to Vercel's dashboard, add security headers in vercel.json, and use environment scoping to separate production from preview deployments.",[31,32,34],"h2",{"id":33},"part-1-vercel-environment-variables","Part 1: Vercel Environment Variables",[36,37,39],"code-block",{"label":38},"Configure in Vercel Dashboard",[40,41,46],"pre",{"className":42,"code":44,"language":45},[43],"language-text","# Public variables (VITE_ prefix for Vite projects)\nVITE_SUPABASE_URL=https://xxx.supabase.co\nVITE_SUPABASE_ANON_KEY=eyJ...\n\n# Private variables (server-side only)\nSUPABASE_SERVICE_ROLE_KEY=eyJ...\nSTRIPE_SECRET_KEY=sk_live_xxx\n","text",[47,48,44],"code",{"__ignoreMap":49},"",[31,51,53],{"id":52},"part-2-vercel-security-headers","Part 2: Vercel Security Headers",[36,55,57],{"label":56},"vercel.json",[40,58,61],{"className":59,"code":60,"language":45},[43],"{\n  \"headers\": [\n    {\n      \"source\": \"/(.*)\",\n      \"headers\": [\n        { \"key\": \"X-Frame-Options\", \"value\": \"DENY\" },\n        { \"key\": \"X-Content-Type-Options\", \"value\": \"nosniff\" },\n        { \"key\": \"Referrer-Policy\", \"value\": \"strict-origin-when-cross-origin\" }\n      ]\n    }\n  ]\n}\n",[47,62,60],{"__ignoreMap":49},[31,64,66],{"id":65},"security-checklist","Security Checklist",[68,69,71],"h4",{"id":70},"vercel-deployment-checklist","Vercel Deployment Checklist",[13,73,74],{},"All secrets in Vercel environment variables",[13,76,77],{},"No hardcoded credentials in code",[13,79,80],{},"Security headers configured",[13,82,83],{},"Preview deployments use test credentials",[13,85,86],{},"Production domain configured",[88,89,90,94,97],"stack-comparison",{},[31,91,93],{"id":92},"alternative-stack-options","Alternative Stack Options",[13,95,96],{},"Consider these related blueprints for different stack combinations:",[98,99,100,109,116],"ul",{},[101,102,103,108],"li",{},[104,105,107],"a",{"href":106},"/blog/blueprints/lovable-netlify","Lovable + Netlify"," - Alternative deployment platform",[101,110,111,115],{},[104,112,114],{"href":113},"/blog/blueprints/lovable-supabase","Lovable + Supabase"," - Backend integration guide",[101,117,118,122],{},[104,119,121],{"href":120},"/blog/blueprints/lovable-stripe","Lovable + Stripe"," - Deploy Stripe webhooks",[124,125,126,130],"related-articles",{},[127,128],"related-card",{"description":129,"href":106,"title":107},"Alternative deployment",[127,131],{"description":132,"href":133,"title":134},"Deep dive into Vercel","/blog/guides/vercel","Vercel Security Guide",[136,137,140,144],"cta-box",{"href":138,"label":139},"/","Start Free Scan",[31,141,143],{"id":142},"deploying-lovable-to-vercel","Deploying Lovable to Vercel?",[13,145,146],{},"Scan for configuration issues before going live.",{"title":49,"searchDepth":148,"depth":148,"links":149},2,[150,151,152,153,154],{"id":33,"depth":148,"text":34},{"id":52,"depth":148,"text":53},{"id":65,"depth":148,"text":66},{"id":92,"depth":148,"text":93},{"id":142,"depth":148,"text":143},"blueprints","2026-02-04","Security guide for deploying Lovable apps to Vercel. Configure environment variables, set up headers, secure serverless functions, and protect your deployment.",false,"md",null,"purple",{"noindex":163},true,"Complete security configuration for deploying Lovable apps to Vercel.","/blog/blueprints/lovable-vercel","8 min read","[object Object]","Article",{"title":5,"description":157},{"loc":165},"blog/blueprints/lovable-vercel",[],"summary_large_image","2aJzozCsw_N1Jc_3G45ONj4xmvwb3Se-zl85as8L8Z0",1775843932528]