dotenv

• L3DATABASE_URL has whitespace around "=". Loaders trim it, but a shell that sources this file will not.
• L5api_secret has whitespace around "=". Loaders trim it, but a shell that sources this file will not.
• L5api_secret has trailing whitespace. It was trimmed here, but some loaders keep it — quote the value if you meant it.
• L5api_secret is lowercase. Environment names are conventionally UPPER_SNAKE_CASE.
• L10QUOTED_TWICE still starts and ends with a quote, so the quotes are part of the value. It was probably quoted twice.
• L11PUBLIC_URL refers to another variable. dotenv doesn't expand those unless you add dotenv-expand, so the value stays literal.
• L12my.bad-key is lowercase. Environment names are conventionally UPPER_SNAKE_CASE.
• L12my.bad-key isn't a valid shell identifier, so export and most tooling will reject it. Use letters, digits and underscores, starting with a letter or underscore.
• L14DATABASE_URL is set 2 times (lines 3, 14). The last one wins — delete the rest.
• L18UNCLOSED opens with a double quote that is never closed, so the rest of the line was read as plain text.

{
  "NODE_ENV": "development",
  "DATABASE_URL": "postgres://app:hunter2@db:5432/app",
  "API_KEY": "********",
  "api_secret": "********",
  "GREETING": "hello\nworld",
  "LITERAL": "hello\\nworld",
  "BIN_PATH": "/usr/local/bin#notacomment",
  "CACHE_TTL": "300",
  "QUOTED_TWICE": "'wrapped twice'",
  "PUBLIC_URL": "${BASE_URL}/app",
  "my.bad-key": "********",
  "EMPTY": "",
  "JWT_PRIVATE_KEY": "********",
  "UNCLOSED": "\"oops",
  "LOG_LEVEL": "info"
}