airwaylab/.env.example at main · airwaylab-app/airwaylab · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69

# PostHog Analytics (Session Replay + Conversion Events)
NEXT_PUBLIC_POSTHOG_KEY=
NEXT_PUBLIC_POSTHOG_HOST=https://us.i.posthog.com

# Discord Admin Webhook Alerts (all optional)
DISCORD_OPS_WEBHOOK_URL=
DISCORD_REVENUE_WEBHOOK_URL=
DISCORD_USER_SIGNALS_WEBHOOK_URL=
DISCORD_GROWTH_WEBHOOK_URL=
DISCORD_PLATFORM_HEALTH_WEBHOOK_URL=
DISCORD_GENERAL_WEBHOOK_URL=
# #strategy-digest — Daily usage + data digest (subs, feedback, contributions, deletions)
DISCORD_WEBHOOK_STRATEGY_DIGEST=

# Discord Community Integration
DISCORD_CLIENT_ID=
DISCORD_CLIENT_SECRET=
DISCORD_BOT_TOKEN=
DISCORD_GUILD_ID=
DISCORD_SUPPORTER_ROLE_ID=
DISCORD_CHAMPION_ROLE_ID=
DISCORD_REDIRECT_URI=https://airwaylab.app/api/auth/discord/callback
DISCORD_INVITE_URL=
NEXT_PUBLIC_DISCORD_INVITE_URL=

# Discord Admin Webhooks — legacy 4-channel system (still active)
DISCORD_OPS_WEBHOOK_URL=
DISCORD_REVENUE_WEBHOOK_URL=
DISCORD_USER_SIGNALS_WEBHOOK_URL=
DISCORD_GROWTH_WEBHOOK_URL=

# Discord Admin Webhooks — 5-channel taxonomy (AIR-1841)
# Fallback used when a specific channel webhook is not configured.
DISCORD_WEBHOOK_URL=
# #critical — Stripe payment failures, credential expiry <72h, security incidents
DISCORD_WEBHOOK_CRITICAL=
# #strategy-digest — Subscriptions, non-bug feedback, provider interest
DISCORD_WEBHOOK_STRATEGY_DIGEST=
# #user-support — Bug-flagged feedback, contact form submissions
DISCORD_WEBHOOK_USER_SUPPORT=
# #platform-health — Sentry spikes, production deploys
DISCORD_WEBHOOK_PLATFORM_HEALTH=
# #audit-log — Account deletions
DISCORD_WEBHOOK_AUDIT_LOG=

# Gmail OAuth2 (Feedback Processor — AIR-759)
# OAuth2 credentials for dev@airwaylab.app to create Gmail drafts from feedback.
# Obtain via Google Cloud Console > APIs & Services > Credentials.
# Use OAuth2 Playground (https://developers.google.com/oauthplayground) to get refresh token.
GMAIL_CLIENT_ID=
GMAIL_CLIENT_SECRET=
GMAIL_REFRESH_TOKEN=

# CAN-SPAM Act compliance: physical mailing address shown in every commercial email footer.
# Required by 16 CFR Part 316. Set to the sender's valid physical postal address.
# Code falls back to AirwayLab B.V. address if not set, but Vercel Production env var should always be configured.
SENDER_PHYSICAL_ADDRESS=AirwayLab B.V., Helperpark 274-6, 9723 ZA Groningen, Netherlands

# Paperclip: user-signals threshold webhook (AIR-2137)
# Fires when a user-signal type hits 20 or 50 events/24h.
PAPERCLIP_SIGNAL_WEBHOOK_URL=
PAPERCLIP_SIGNAL_WEBHOOK_SECRET=

# Paperclip: daily user-signals backstop cron (AIR-2207)
# Used by /api/cron/user-signals-monitor (09:00 UTC) to fire the signals
# routine webhook for any signals above threshold whose real-time webhook failed.
PAPERCLIP_SIGNALS_WEBHOOK_URL=
PAPERCLIP_SIGNALS_WEBHOOK_SECRET=