I guess it's not currently required, probably should be

@app/config/src/index.ts

@@ -1,4 +1,4 @@
-import { defaultNumber, minLength, parseInteger, required } from "./validate";
+import { defaultNumber, parseInteger, required } from "./validate";
 
 // @ts-ignore
 const packageJson = require("../../../package.json");
@@ -13,18 +13,9 @@ export const emailLegalText: string =
   // Envvar here so we can override on the demo website
   process.env.LEGAL_TEXT || "<Insert legal email footer text here >";
 
-export const SECRET: string = minLength(
-  required({ value: process.env.SECRET, name: "SECRET" }),
-  64
-).value;
+export const SECRET: string | undefined = process.env.SECRET;
 
-export const JWT_SECRET: string = minLength(
-  required({
-    value: process.env.JWT_SECRET,
-    name: "JWT_SECRET",
-  }),
-  64
-).value;
+export const JWT_SECRET: string | undefined = process.env.JWT_SECRET;
 
 export const REDIS_URL: string | undefined = process.env.REDIS_URL;