Use server-only env vars for Axiom token

Remove NEXT_PUBLIC_ prefix from AXIOM_TOKEN and AXIOM_DATASET to
prevent exposing the API token in client bundles.

Author: Ahmed Elywa

.github/workflows/deploy.yml

@@ -21,8 +21,8 @@ jobs:
       - name: Build
         run: bun run build
         env:
-          NEXT_PUBLIC_AXIOM_DATASET: ${{ secrets.NEXT_PUBLIC_AXIOM_DATASET }}
-          NEXT_PUBLIC_AXIOM_TOKEN: ${{ secrets.NEXT_PUBLIC_AXIOM_TOKEN }}
+          AXIOM_DATASET: ${{ secrets.AXIOM_DATASET }}
+          AXIOM_TOKEN: ${{ secrets.AXIOM_TOKEN }}
 
       - name: Prepare standalone output
         run: |
@@ -47,6 +47,6 @@ jobs:
           ssh -i ~/.ssh/deploy_key -p 1993 ${{ secrets.DEPLOY_USER }}@${{ secrets.DEPLOY_HOST }} "\
             cd ${{ secrets.DEPLOY_PATH }} && \
             pm2 delete prayCalendar 2>/dev/null || true && \
-            NEXT_PUBLIC_AXIOM_DATASET=${{ secrets.NEXT_PUBLIC_AXIOM_DATASET }} \
-            NEXT_PUBLIC_AXIOM_TOKEN=${{ secrets.NEXT_PUBLIC_AXIOM_TOKEN }} \
+            AXIOM_DATASET=${{ secrets.AXIOM_DATASET }} \
+            AXIOM_TOKEN=${{ secrets.AXIOM_TOKEN }} \
             PORT=3001 pm2 start server.js --name prayCalendar"

src/lib/axiom/axiom.ts

@@ -1,7 +1,7 @@
 import { Axiom } from '@axiomhq/js';
 
 const axiomClient = new Axiom({
-  token: process.env.NEXT_PUBLIC_AXIOM_TOKEN!,
+  token: process.env.AXIOM_TOKEN!,
 });
 
 export default axiomClient;

src/lib/axiom/server.ts

@@ -6,7 +6,7 @@ export const logger = new Logger({
   transports: [
     new AxiomJSTransport({
       axiom: axiomClient,
-      dataset: process.env.NEXT_PUBLIC_AXIOM_DATASET!,
+      dataset: process.env.AXIOM_DATASET!,
     }),
   ],
   formatters: nextJsFormatters,