···27272828## Deployment
29293030-The service should run locally without any of the below due to the [development client](https://atproto.com/specs/oauth#localhost-client-development) exception for `localhost`. If you wish to deploy this however, you'll need to enable the [confidential client](https://atproto.com/specs/oauth#localhost-client-development) by setting the following values:
3030+The service should run locally without any of the below due to the [development client](https://atproto.com/specs/oauth#localhost-client-development) exception for `localhost`. If you wish to deploy this however, you'll need to enable the [confidential client](https://atproto.com/specs/oauth#confidential-client-authentication) by setting the following values:
313132323333* `SESSION_SECRET`: Any ol' secret. Something like `openssl rand -hex 32`
3434* `CLIENT_HOSTNAME`: Wherever the service is running (e.g. https://atlas.whiteley.io)
3535-* `CLIENT_SECRET_KEY`: EC private key in Multibase format. Can be generated with `goat key generate -t P-256`
3535+* `CLIENT_SECRET_KEY`: EC private key in multibase format. Can be generated with `goat key generate -t P-256`