.env.example

# Secrets are managed with Doppler (project: tronbrowser). Prefer:
#   doppler run -- pnpm <script>
# This file documents the variables and is a fallback for local .env use
# (copy to .env and fill in; .env is gitignored). Doppler is the source of truth.
#
# --- Storage ---------------------------------------------------------------
# Option A: managed cloud database (Turso) — has managed backups.
TRONBROWSER_DB_URL=libsql://your-db.turso.io
TRONBROWSER_DB_AUTH_TOKEN=your-turso-token
#
# Option B: bring your own SQLite — you own your data (and your backups).
#   Local file:
# TRONBROWSER_DB_PATH=/home/you/.tronbrowser/db.sqlite
#   Or your own libSQL server:
# TRONBROWSER_DB_URL=libsql://db.your-server.example
# TRONBROWSER_DB_AUTH_TOKEN=your-token
#
# --- AI providers (Bring Your Own Keys) -----------------------------------
# Free / self-hosted: bring your own keys. The paid cloud tier uses OUR keys,
# stored in the DB (ai_provider_keys, scoped per app) — NOT here.
# Same 8 providers used across Profullstack apps (crawlproof.com):
ANTHROPIC_API_KEY=
OPENAI_API_KEY=
GEMINI_API_KEY=
DEEPSEEK_API_KEY=
PERPLEXITY_API_KEY=
HUGGINGFACE_API_KEY=
MOONSHOT_API_KEY=        # Kimi (Moonshot AI); KIMI_API_KEY also accepted
DASHSCOPE_API_KEY=       # Qwen (Alibaba); QWEN_API_KEY also accepted
# Local runtimes need no key: Ollama / LM Studio / vLLM.

# --- CoinPay OAuth (x402 payments) ----------------------------------------
COINPAY_CLIENT_ID=
COINPAY_REDIRECT_URI=tronbrowser://oauth/coinpay
# Override only for self-hosted CoinPay:
# COINPAY_AUTHORIZE_URL=https://coinpayportal.com/api/oauth/authorize
# COINPAY_TOKEN_URL=https://coinpayportal.com/api/oauth/token

# --- Extension store (tronbrowser.dev/store) -------------------------------
APP_URL=https://tronbrowser.dev
# The $1 listing fee — Stripe (card):
STRIPE_SECRET_KEY=
STRIPE_WEBHOOK_SECRET=          # for /api/store/payments/stripe/webhook
# The $1 listing fee — CoinPay / x402 (1 USDC):
STORE_X402_NETWORK=base
STORE_X402_PAY_TO=              # your USDC receiving address
# COINPAY_SETTLEMENT_URL=https://coinpayportal.com/api/settlements
# STORE_X402_TRUST_CLIENT=1     # DEV ONLY: accept client-reported settlement
# vu1nz.com security scan (non-gating; recorded 'skipped' if unset):
VU1NZ_API_URL=
VU1NZ_API_KEY=
# Git registry mirror (audit trail). Repo + token; no-op if unset:
STORE_REGISTRY_REPO=           # e.g. profullstack/tronbrowsers.dev
# STORE_REGISTRY_BRANCH=main
# STORE_REGISTRY_PREFIX=apps/extensions/registry
GITHUB_TOKEN=
# Bundle hosting on files.profullstack.com (AgentBBS Files over SFTP):
FILES_PUBLIC_BASE=https://files.profullstack.com
FILES_SCP_TARGET=files@files.profullstack.com
# Full-auto publisher provisioning: the store SSHes the BBS host and runs
# `agentbbs provision-user`. Unset = keys saved, operator provisions manually.
BBS_SSH_HOST=                  # e.g. bbs.profullstack.com
BBS_SSH_USER=                  # operator login with the agentbbs CLI
BBS_SSH_KEY=                   # path to the operator private key (mounted secret)
# BBS_SSH_PORT=22
# AGENTBBS_BIN=agentbbs