PaymentControl/.env.example at main · Djoystick/PaymentControl · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
# Frontend (safe to expose in browser via NEXT_PUBLIC_)
NEXT_PUBLIC_APP_NAME=Payment Control
NEXT_PUBLIC_APP_STAGE=production
# Use relative API base in Vercel/production. Keep "/api" unless you really need custom routing.
NEXT_PUBLIC_API_BASE_URL=/api
# Bot username only (without @), e.g. Payment_control_center_bot
NEXT_PUBLIC_TELEGRAM_BOT_USERNAME=replace-with-bot-username

# Telegram Mini App analytics (optional for local dev; required for production analytics collection).
# Get values in TON Builders / @DataChief_bot as described in Telegram Analytics docs.
NEXT_PUBLIC_TELEGRAM_ANALYTICS_TOKEN=
NEXT_PUBLIC_TELEGRAM_ANALYTICS_APP_NAME=
# Optional: STG or PROD. Leave empty to use SDK default (PROD).
NEXT_PUBLIC_TELEGRAM_ANALYTICS_ENV=
NEXT_PUBLIC_SUPABASE_URL=https://replace-with-project-ref.supabase.co
NEXT_PUBLIC_SUPABASE_ANON_KEY=replace-with-supabase-anon-key
# Donation support rails (external, no in-app payment processing).
# Keep Boosty as the primary active rail URL.
# `NEXT_PUBLIC_SUPPORT_PROJECT_URL` remains a legacy fallback for old builds and should stay Boosty-aligned.
NEXT_PUBLIC_SUPPORT_PROJECT_URL=https://boosty.to/tvoy_kosmonavt/posts/cf4114af-41b0-4a6e-b944-be6ded323c21
NEXT_PUBLIC_SUPPORT_BOOSTY_URL=https://boosty.to/tvoy_kosmonavt/posts/cf4114af-41b0-4a6e-b944-be6ded323c21
# Optional secondary rail slot (CloudTips).
# Keep empty until CloudTips URL is approved.
# Invalid or duplicate URL values are ignored and the slot stays in pending setup state.
NEXT_PUBLIC_SUPPORT_CLOUDTIPS_URL=

# Backend / server-only (never expose to browser)
SUPABASE_URL=https://replace-with-project-ref.supabase.co
SUPABASE_SERVICE_ROLE_KEY=replace-with-supabase-service-role-key
SUPABASE_JWT_SECRET=replace-with-supabase-jwt-secret
TELEGRAM_BOT_TOKEN=replace-with-telegram-bot-token
TELEGRAM_BOT_API_BASE_URL=https://api.telegram.org
TELEGRAM_INIT_DATA_MAX_AGE_SEC=86400
REMINDER_SCHEDULED_DISPATCH_SECRET=replace-with-long-random-secret
CRON_SECRET=replace-with-long-random-secret
# Telegram numeric chat/user id that receives in-app bug reports from users.
BUG_REPORT_TELEGRAM_CHAT_ID=
# Comma-separated Telegram numeric user ids allowed to manage supporter badges.
# Example: 123456789,987654321
SUPPORTER_BADGE_OWNER_TELEGRAM_USER_IDS=
# Optional travel receipt OCR provider setup (server-side).
# Keep receipt draft path independent from OCR availability.
# Configure Paddle as the primary provider for free self-hosted OCR contour.
TRAVEL_RECEIPT_OCR_PROVIDER=paddle
TRAVEL_RECEIPT_OCR_PADDLE_ENDPOINT=
TRAVEL_RECEIPT_OCR_PADDLE_API_KEY=
TRAVEL_RECEIPT_OCR_PADDLE_TIMEOUT_MS=15000
TRAVEL_RECEIPT_OCR_PREPROCESS_PROFILE=receipt_basic_v1
# Optional legacy OpenAI branch (disabled unless explicitly configured).
TRAVEL_RECEIPT_OCR_OPENAI_API_KEY=
TRAVEL_RECEIPT_OCR_OPENAI_MODEL=gpt-4o-mini

# Optional browser OCR spike controls (client-side experimental path).
# Keep enabled for on-device OCR parse attempts from receipt drafts.
NEXT_PUBLIC_TRAVEL_RECEIPT_CLIENT_OCR_ENABLED=true
# OCR model load + processing timeout in milliseconds.
NEXT_PUBLIC_TRAVEL_RECEIPT_CLIENT_OCR_TIMEOUT_MS=30000
# Optional fallback to server OCR parse when client OCR fails.
NEXT_PUBLIC_TRAVEL_RECEIPT_CLIENT_OCR_ALLOW_SERVER_FALLBACK=false

# Optional local browser fallback (development only)
# Keep disabled in production. Enable only for local manual testing outside Telegram.
ALLOW_DEV_TELEGRAM_AUTH_FALLBACK=false
DEV_TELEGRAM_USER_ID=
DEV_TELEGRAM_USERNAME=
DEV_TELEGRAM_FIRST_NAME=
DEV_TELEGRAM_LAST_NAME=
DEV_TELEGRAM_PHOTO_URL=