.env.example

# Public browser configuration. The Supabase anon key is designed to be public;
# write access is protected by Auth and the RLS policies in supabase/schema.sql.
VITE_SUPABASE_URL=https://YOUR_PROJECT.supabase.co
VITE_SUPABASE_ANON_KEY=YOUR_SUPABASE_ANON_KEY
# Set this only when `vercel dev` or another runtime serves /api/github-progress.
VITE_ENABLE_GITHUB_SYNC=false

# Server-only Vercel environment variables. Never prefix these with VITE_.
GITHUB_REPOSITORY=owner/private-repository
GITHUB_TOKEN=github_pat_read_only_token

# Server-only Supabase access for orders, callbacks and statistics.
SUPABASE_URL=https://YOUR_PROJECT.supabase.co
SUPABASE_SERVICE_ROLE_KEY=YOUR_SERVICE_ROLE_KEY

# One-time bootstrap for /admin environment-variable management.
VERCEL_API_TOKEN=YOUR_SCOPED_VERCEL_TOKEN
VERCEL_PROJECT_ID=prj_xxx
VERCEL_TEAM_ID=team_xxx
VERCEL_DEPLOY_HOOK_URL=https://api.vercel.com/v1/integrations/deploy/xxx

# Sentry installation statistics.
SENTRY_ORG=organization-slug
SENTRY_PROJECT=project-slug-or-id
SENTRY_AUTH_TOKEN=sntrys_xxx
SENTRY_HWID_TAG=hwid
SENTRY_INSTALL_PERIOD=90d
SENTRY_RUNNING_PERIOD=5m

# Stripe, PayPal and PayerURL are the three providers with built-in drivers (api/_lib/payments.mjs).
# Stripe's and PayPal's callbacks confirm payment by re-reading the provider's API, so neither needs a
# webhook secret.
STRIPE_SECRET_KEY=sk_test_xxx
PAYPAL_CLIENT_ID=YOUR_PAYPAL_CLIENT_ID
PAYPAL_SECRET=YOUR_PAYPAL_SECRET
# Optional fallback when public_config.environment is unset: sandbox or live.
PAYPAL_ENV=sandbox

# PayerURL issues exactly two keys and no webhook secret: the secret key is the HMAC key for both the
# outbound request and the inbound callback. There is nothing to register in its dashboard either —
# notify_url is sent with each order.
PAYERURL_PUBLIC_KEY=YOUR_PAYERURL_PUBLIC_KEY
PAYERURL_SECRET_KEY=YOUR_PAYERURL_SECRET_KEY

# Other providers' credentials are managed from /admin after bootstrap.

# LDC EasyPay credentials (NOT the Linux.DO Connect OAuth credentials).
# Linux.DO Connect credentials live only in Supabase Auth's custom:linuxdo provider.
SITE_URL=https://aetherac.abnt.it
LDC_CLIENT_ID=
LDC_CLIENT_SECRET=