DevPulse-AI/apps/web/.env.example at main · captain-jack-sparrow909/DevPulse-AI · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
# Supabase Postgres (free tier)
# Copy both URLs from Supabase Dashboard -> Connect.
# Runtime/serverless: Supavisor transaction pooler (port 6543). The app caps
# each serverless instance at two database connections.
# DATABASE_URL="postgresql://postgres.[ref]:[password]@aws-0-[region].pooler.supabase.com:6543/postgres?pgbouncer=true&connection_limit=2&pool_timeout=30&sslmode=require"
# Local runtime and Prisma schema operations: Supavisor session pooler (port
# 5432). The app prefers this URL outside production to avoid transaction-pool
# prepared-statement churn. This also works on IPv4 networks.
# DIRECT_URL="postgresql://postgres.[ref]:[password]@aws-0-[region].pooler.supabase.com:5432/postgres?sslmode=require"
# Optional separate local runtime alias; DIRECT_URL is sufficient for most setups.
# DATABASE_URL_SESSION="postgresql://postgres.[ref]:[password]@aws-0-[region].pooler.supabase.com:5432/postgres?sslmode=require"
# The direct db.[ref].supabase.co:5432 URL is suitable only when the machine has IPv6
# connectivity or the Supabase IPv4 add-on is enabled.
DATABASE_URL=""
DIRECT_URL=""

BETTER_AUTH_SECRET="generate-a-long-random-secret-at-least-32-chars"
BETTER_AUTH_URL="http://localhost:3000"
NEXT_PUBLIC_APP_URL="http://localhost:3000"

# DeepSeek (https://platform.deepseek.com) — post writing
DEEPSEEK_API_KEY=""
DEEPSEEK_BASE_URL="https://api.deepseek.com"
DEEPSEEK_MODEL="deepseek-v4-flash"

# Protects /api/cron/slot (Authorization: Bearer …)
CRON_SECRET="generate-a-long-random-secret"

# ---------------------------------------------------------------------------
# Research sources (see information-sources.md + apps/web/src/lib/integrations)
# Most collectors work WITHOUT keys. Optional tokens only raise rate limits.
# ---------------------------------------------------------------------------

# GitHub REST — optional, raises rate limit 60 → 5000/hr
# https://github.com/settings/tokens (public_repo or fine-grained read)
GITHUB_TOKEN=""

# Hugging Face — optional
# https://huggingface.co/settings/tokens
HF_TOKEN=""

# Dev.to / Forem — optional
# https://dev.to/settings/extensions
DEVTO_API_KEY=""

# Stack Exchange — optional (higher quota)
# https://stackapps.com/apps/oauth/register
STACKEXCHANGE_KEY=""

# Product Hunt GraphQL — optional (required for PH posts)
# https://api.producthunt.com/v2/docs
PRODUCTHUNT_TOKEN=""

# X / Twitter — RESEARCH ONLY, use lightly (paid). Never used to post.
# Prefer app-only bearer for recent search.
X_BEARER_TOKEN=""
X_API_KEY=""
X_API_SECRET=""

# LinkedIn — not used for posting (manual only)
LINKEDIN_ACCESS_TOKEN=""
LINKEDIN_CLIENT_ID=""
LINKEDIN_CLIENT_SECRET=""

# ---------------------------------------------------------------------------
# Cloudflare R2 — durable screenshots on Vercel (S3-compatible)
# Create a bucket (e.g. devpulse-screenshots). Public access optional;
# without R2_PUBLIC_URL images are served via /api/media/r2/...
# ---------------------------------------------------------------------------
CLOUDFLARE_ACCOUNT_ID=""
CLOUDFLARE_S3_ENDPOINT="https://<ACCOUNT_ID>.r2.cloudflarestorage.com"
# R2 S3 API tokens (either naming style works):
CLOUDFLARE_ACCESS_KEY_ID=""
CLOUDFLARE_SECRET_ACCESS_KEY=""
# aliases also supported: CLOUDFLARE_ACCESS_KEY / CLOUDFLARE_SECRET_KEY
R2_BUCKET="devpulse-screenshots"
# Optional public base, e.g. https://pub-xxxx.r2.dev
R2_PUBLIC_URL=""

# ---------------------------------------------------------------------------
# Works with ZERO extra keys:
#   Hacker News, arXiv, Reddit JSON, RSS (OpenAI/Anthropic/DeepMind/Meta/…
#   Netflix/Cloudflare/Stripe/… blogs), Hugging Face API, Dev.to, Stack Overflow
# ---------------------------------------------------------------------------