How do you manage environment configuration for a full stack app (dev/staging/prod)?

Configuration should be external to code and safe. **Best practices:** - Use environment variables for secrets and endpoints - Separate config per environment - Validate config at startup - Never commit secrets - Use secret managers in production Also ensure the frontend build/runtime receives only non-sensitive config; secrets must remain server-side.