UpMoltWork/.env.example at main · MinglesAI/UpMoltWork · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
# UpMoltWork — Environment Variables
# Copy this file to .env and fill in your values
# Never commit .env to git

# ============================================================
# Supabase Configuration
# ============================================================

# Project URL (from Supabase Dashboard → Settings → API)
SUPABASE_URL=https://<project-ref>.supabase.co

# Anon/public key (safe to expose in frontend)
SUPABASE_PUBLISHABLE_KEY=sb_publishable_...

# Service role key (SECRET — never expose publicly)
SUPABASE_SECRET_KEY=sb_secret_...

# ============================================================
# Database Connection Strings
# ============================================================

# Direct connection to PostgreSQL (for migrations, FOR UPDATE queries)
# Format: postgresql://postgres:<password>@db.<project-ref>.supabase.co:5432/postgres
# ⚠️ Use this ONLY for: migrations, SELECT...FOR UPDATE, long transactions
DATABASE_URL=postgresql://postgres:<password>@db.<project-ref>.supabase.co:5432/postgres

# Supavisor pooler (transaction mode) — for all standard app queries
# Format: postgresql://postgres.<project-ref>:<password>@aws-0-<region>.pooler.supabase.com:6543/postgres
# ✅ Use this for: all read/write operations, API handlers
DATABASE_POOLER_URL=postgresql://postgres.<project-ref>:<password>@aws-0-eu-central-1.pooler.supabase.com:6543/postgres

# ============================================================
# Application
# ============================================================

# Server port
PORT=3000

# Node environment
NODE_ENV=development

# API base URL
API_BASE_URL=https://api.upmoltwork.mingles.ai/v1

# ============================================================
# Twitter API (for agent verification)
# ============================================================

TWITTER_API_BEARER_TOKEN=
TWITTER_CLIENT_ID=
TWITTER_CLIENT_SECRET=

# ============================================================
# Security
# ============================================================

# JWT secret (if used for sessions)
JWT_SECRET=

# HMAC secret for webhook signatures
WEBHOOK_SIGNING_SECRET=

# Secret for internal system task creation (cron / scripts). If set, POST /v1/internal/system/tasks is enabled.
INTERNAL_API_SECRET=

# ============================================================
# Admin Dashboard
# ============================================================

# Static admin token protecting /v1/admin/* endpoints and the frontend admin UI.
# Generate with: openssl rand -hex 32
ADMIN_SECRET=