[Bug]: Failed to parse dotenv file. Encountered unexpected whitespace.

[TotalLag]

Error Message and Logs

When deploying an application through Coolify, the build fails during the environment parsing step. Although the error message initially looks related to Composer, further investigation shows that Coolify itself struggles to parse a .env variable containing quotes and whitespace (e.g., a Content Security Policy string).

Error message snippet:

Generating optimized autoload files
> Illuminate\Foundation\ComposerScripts::postAutoloadDump
> @php artisan package:discover --ansi
The environment file is invalid!
Failed to parse dotenv file. Encountered unexpected whitespace at ["default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline';"].
Script @php artisan package:discover --ansi handling the post-autoload-dump event returned with error code 1
Plugins have been disabled automatically as you are running as root, this may be the cause of the script failure.
See also https://getcomposer.org/root

I've tried various methods (e.g., "Is Literal", Build Variable, adding quotes manually) to successfully parse this environment variable, but the build still fails.

Steps to Reproduce

Steps to Reproduce

1. Deploy an application using Coolify with a .env variable that includes a CSP directive with quotes, for example:

CONTENT_SECURITY_POLICY="default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline';"

2. Trigger a build/deployment within Coolify.
3. Observe the error in the logs indicating a failure to parse the .env file due to unexpected whitespace or quotes.

Example Repository URL

No response

Coolify Version

v4.0.0-beta.379

Are you using Coolify Cloud?

No (self-hosted)

Operating System and Version (self-hosted)

Ubuntu 22.04

Additional Information

No response

[TotalLag]

The workaround I found to work is just to flip the quotes and check Is Literal:

CONTENT_SECURITY_POLICY='default-src "self"; script-src "self" "unsafe-inline" "unsafe-eval"; style-src "self" "unsafe-inline";'