zapcooking/.env.example at main · spe1020/zapcooking · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
# Breez SDK API Key for Spark wallet
# Get your API key from https://breez.technology/sdk/
VITE_BREEZ_API_KEY=your_api_key_here

# ============================================
# STRIKE API CONFIGURATION
# ============================================
# Get your API key from Strike Dashboard:
# - Production: https://dashboard.strike.me/
# - Sandbox: https://dev.dashboard.strike.me/
#
# Sandbox documentation: https://docs.strike.me/sandbox/
# ============================================

# Strike API Key (required for Lightning payments)
STRIKE_API_KEY=your_strike_api_key_here

# Strike API Base URL
# - Production: https://api.strike.me (default if not set)
# - Sandbox: https://api.dev.strike.me
STRIKE_API_BASE_URL=https://api.dev.strike.me

# Strike Webhook Secret (required for webhook signature verification)
# Generate this in Strike Dashboard under API Keys > Webhooks
STRIKE_WEBHOOK_SECRET=your_webhook_secret_here

# ============================================
# MEMBERSHIP CONFIGURATION
# ============================================

# Enable/disable membership features
MEMBERSHIP_ENABLED=true

# Relay API Secret for pantry.zap.cooking
RELAY_API_SECRET=your_relay_api_secret_here

# Temporary rollout flag: when true, /api/extract-recipe accepts image/text
# requests without a NIP-98 Authorization header (body pubkey only). Remove
# after souschef deploy is confirmed and legacy log lines are quiet for 7 days.
# EXTRACT_LEGACY_AUTH=true

# ============================================
# STRIPE CONFIGURATION (Credit Card Payments)
# ============================================

# Stripe Secret Key
STRIPE_SECRET_KEY=your_stripe_secret_key_here

# Stripe Webhook Secret (required for webhook signature verification)
# Generate this in Stripe Dashboard > Webhooks > Signing secret
STRIPE_WEBHOOK_SECRET=whsec_your_webhook_secret_here

# ============================================
# BRANTA GUARDRAIL CONFIGURATION
# ============================================
# Payment address verification service
# https://branta.pro / https://developer.branta.pro
# ============================================

# Branta API Key (required for payment registration/verification)
BRANTA_API_KEY=your_branta_api_key_here

# Branta server environment (optional, defaults to Production)
# - Production (https://guardrail.branta.pro)
# - Staging    (https://staging.guardrail.branta.pro)
# - Localhost  (http://localhost:3000)
BRANTA_ENVIRONMENT=Production

# ============================================
# GOOGLE DRIVE NSEC BACKUP (Sign in with Google)
# ============================================
# Web OAuth client ID for the "Sign in with Google" encrypted nsec backup.
# MUST be the SAME web OAuth client used by the Zap Cooking Android app
# (shared Google Cloud project → shared Drive appDataFolder → backups made on
# one platform decrypt on the other). Add this site's origin to the client's
# "Authorized JavaScript origins". Public by design (client-side GIS); never a
# secret. Leaving it unset simply disables the Google backup button.
PUBLIC_GOOGLE_WEB_CLIENT_ID=your_google_web_oauth_client_id.apps.googleusercontent.com