.env.example

# Turso / libSQL — the waitlist database
# Create a DB at https://turso.tech then: turso db show <name> --url  /  turso db tokens create <name>
TURSO_DATABASE_URL=libsql://your-db.turso.io
TURSO_AUTH_TOKEN=your-token

# Login with CoinPayPortal (OAuth). Register a client at
# https://coinpayportal.com/dashboard/oauth/new with redirect_uri =
# <APP_BASE_URL>/auth/coinpay/callback and scopes "openid email profile".
COINPAY_ISSUER=https://coinpayportal.com
COINPAY_CLIENT_ID=cp_xxx
COINPAY_CLIENT_SECRET=cps_xxx
APP_BASE_URL=http://localhost:8080
# OAUTH_REDIRECT_URI=            # defaults to <APP_BASE_URL>/auth/coinpay/callback
SESSION_SECRET=change-me-to-a-long-random-string

# CoinPayPortal PAYMENTS (distinct from OAuth login above) — the $1 account
# setup fee. Create a payments-scoped API key on your CoinPayPortal business
# (scope payments:create) and set a webhook there pointing at
# <APP_BASE_URL>/api/coinpay/webhook with the secret below. When COINPAY_API_KEY
# is unset, signup auto-activates without charging (dev).
COINPAY_API_KEY=cp_live_xxx
COINPAY_BUSINESS_ID=            # UUID; optional if the API key is business-scoped
COINPAY_WEBHOOK_SECRET=        # verifies the X-CoinPay-Signature webhook
COINPAY_PAY_CHAIN=USDC_POL     # blockchain the $1 is charged on
SETUP_FEE_USD=1.00

# GitHub webhook — emails NOTIFY_EMAIL when a PR/issue is closed. Add a webhook
# on the repo (Settings → Webhooks) → <APP_BASE_URL>/api/webhooks/github,
# content-type application/json, secret = GITHUB_WEBHOOK_SECRET, events =
# Issues + Pull requests. Verified via X-Hub-Signature-256.
GITHUB_WEBHOOK_SECRET=ghwh_xxx
NOTIFY_EMAIL=moshcoder@gmail.com
# Optional: MOSHCODE_WEBHOOK_SECRET verifies /api/webhooks/moshcode.
MOSHCODE_WEBHOOK_SECRET=whsec_xxx

# Resend — waitlist double opt-in confirmation emails.
# Get a key at https://resend.com/api-keys and verify your sending domain.
# When RESEND_API_KEY is unset, signups are auto-confirmed (no email sent).
RESEND_API_KEY=re_xxx
RESEND_FROM=moshcoding <noreply@moshcoding.com>

# Optional
# PORT=8080

# OpenAI — AI hero image for ?style=<genre> tenant pages (gpt-image-*).
OPENAI_API_KEY=sk-xxx
OPENAI_IMAGE_MODEL=gpt-image-2
# Where generated images are cached AND uploaded reels (dashboard → Videos) are
# stored. Mount a Railway volume here to persist across deploys (otherwise
# generated images regenerate and uploaded videos are lost after each deploy).
DATA_DIR=.data
# Max size per uploaded reel, in bytes (default 100 MB).
# MEDIA_MAX_BYTES=104857600

# Railway API token — powers the dashboard "Custom domain" tab (self-serve): a
# user parks their claimed domain here and gets the DNS records to set, with a
# Verify button. Use a PROJECT token (Railway → project → Settings → Tokens) —
# it authenticates with the Project-Access-Token header; an account/team token
# (Authorization: Bearer) also works. Project/service/env default to this
# deployment; override if needed.
RAILWAY_API_TOKEN=
# RAILWAY_PROJECT_ID=
# RAILWAY_SERVICE_ID=
# RAILWAY_ENVIRONMENT_ID=