diff --git a/apps/editor/lib/auth.ts b/apps/editor/lib/auth.ts
index 794baa8e..c35bb97f 100644
--- a/apps/editor/lib/auth.ts
+++ b/apps/editor/lib/auth.ts
@@ -11,7 +11,7 @@ export const auth = createAuth({
   db,
   appName: 'Pascal Editor',
   baseURL: BASE_URL,
-  secret: process.env.BETTER_AUTH_SECRET!,
+  secret: process.env.BETTER_AUTH_SECRET || 'build-placeholder-not-used-at-runtime',
   googleClientId: process.env.GOOGLE_CLIENT_ID,
   googleClientSecret: process.env.GOOGLE_CLIENT_SECRET,
   sendMagicLink: async ({ email, url }) => {
diff --git a/apps/editor/lib/supabase/server.ts b/apps/editor/lib/supabase/server.ts
index 52e3ff1a..2bdfaa22 100644
--- a/apps/editor/lib/supabase/server.ts
+++ b/apps/editor/lib/supabase/server.ts
@@ -1,8 +1,8 @@
 import { createClient } from '@supabase/supabase-js'
 import type { SupabaseDatabase } from '@pascal-app/db'
 
-const supabaseUrl = process.env.NEXT_PUBLIC_SUPABASE_URL ?? ''
-const supabaseServiceRoleKey = process.env.SUPABASE_SERVICE_ROLE_KEY ?? ''
+const supabaseUrl = process.env.NEXT_PUBLIC_SUPABASE_URL || 'https://placeholder.supabase.co'
+const supabaseServiceRoleKey = process.env.SUPABASE_SERVICE_ROLE_KEY || 'placeholder'
 
 /**
  * Supabase client for server-side use with service role key
diff --git a/turbo.json b/turbo.json
index 8f1ce2f4..3ad80519 100644
--- a/turbo.json
+++ b/turbo.json
@@ -5,7 +5,18 @@
     "build": {
       "dependsOn": ["^build"],
       "inputs": ["$TURBO_DEFAULT$", ".env*"],
-      "outputs": [".next/**", "!.next/cache/**", "dist/**"]
+      "outputs": [".next/**", "!.next/cache/**", "dist/**"],
+      "env": [
+        "BETTER_AUTH_SECRET",
+        "BETTER_AUTH_URL",
+        "GOOGLE_CLIENT_ID",
+        "GOOGLE_CLIENT_SECRET",
+        "RESEND_API_KEY",
+        "POSTGRES_URL",
+        "NEXT_PUBLIC_SUPABASE_URL",
+        "NEXT_PUBLIC_SUPABASE_ANON_KEY",
+        "SUPABASE_SERVICE_ROLE_KEY"
+      ]
     },
     "lint": {
       "dependsOn": ["^lint"]