Edit web/config.js and enter only your Supabase Project URL and Publishable Key. Never put a service-role/secret key here.

SUPABASE_URL = https://YOUR_PROJECT_REF.supabase.co
SUPABASE_PUBLISHABLE_KEY = sb_publishable_...