zeroone/.env.example at main · PotLock/zeroone · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
# ZeroOne Environment Configuration
# =============================================================================
# REQUIRED VARIABLES - Must be filled in for the platform to work
# =============================================================================

# ── Domain Configuration ─────────────────────────────────────────────────────
# Your root domain. Subdomains auto-configured:
#   yourdomain.com        → frontend (Vercel)
#   api.yourdomain.com    → backend
#   traefik.yourdomain.com → traefik dashboard
#   *.yourdomain.com      → ZeroClaw agent containers
DOMAIN=yourdomain.com

# ── Security (REQUIRED) ──────────────────────────────────────────────────────
# JWT secret for token signing (used internally)
# Generate: openssl rand -hex 32
JWT_SECRET=your_jwt_secret_here

# AES-256-GCM encryption key for agent tokens and API keys (32-char hex)
# Generate: openssl rand -hex 16
ENCRYPTION_KEY=your_32_char_hex_encryption_key_here

# ── Traefik Configuration ────────────────────────────────────────────────────
# Email for Let's Encrypt SSL certificates
ACME_EMAIL=your@email.com

# Basic auth for Traefik dashboard
# Generate: htpasswd -nb admin yourpassword
TRAEFIK_DASHBOARD_AUTH=admin:$$apr1$$xyz$$hashedpassword

# ── Database ─────────────────────────────────────────────────────────────────
# Neon PostgreSQL connection string
DATABASE_URL=postgresql://user:password@ep-xxxxx.us-east-1.aws.neon.tech/dbname?sslmode=require

# ── Clerk Authentication ─────────────────────────────────────────────────────
# Get from https://dashboard.clerk.com → API Keys
CLERK_SECRET_KEY=

# Clerk Webhook Secret (for receiving user events)
# Create webhook endpoint: https://api.yourdomain.com/api/webhooks/clerk
# Then copy the Signing Secret here
CLERK_WEBHOOK_SECRET=

# ── Resend Email Service ─────────────────────────────────────────────────────
# Get from https://resend.com → API Keys
RESEND_API_KEY=re_your_resend_api_key
RESEND_FROM_EMAIL=ZeroOne <noreply@yourdomain.com>

# ── ModelArk Quick Start Configuration ───────────────────────────────────────
# API key for ModelArk Quick Start - no user API key required
# Get from https://ark.bytepluses.com/
MODELARK_API_KEY=your_modelark_api_key

# ── ZeroClaw ─────────────────────────────────────────────────────────────────
ZEROCLAW_IMAGE=ghcr.io/zeroclaw-labs/zeroclaw:latest

# ── CORS ─────────────────────────────────────────────────────────────────────
CORS_ORIGIN=https://yourdomain.com,https://www.yourdomain.com

# ── Frontend URL ─────────────────────────────────────────────────────────────
# Used for email links, Stripe checkout redirects, and redirects
FRONTEND_URL=https://yourdomain.com

# =============================================================================
# OPTIONAL VARIABLES - Only needed for specific features
# =============================================================================

# ── Payment Providers (Stripe + Coinbase Commerce) ───────────────────────────
# See setup_payment.md for detailed configuration instructions
#
# === Stripe (Credit Cards, Bank Transfer, Apple Pay, Google Pay) ===
# Webhook endpoint: https://api.yourdomain.com/api/payments/webhook
STRIPE_SECRET_KEY=sk_test_...
STRIPE_WEBHOOK_SECRET=whsec_...

# Stripe Price IDs
STRIPE_PRICE_ID_PRO_MONTHLY=price_...
STRIPE_PRICE_ID_PRO_YEARLY=price_...
STRIPE_PRICE_ID_BUSINESS_MONTHLY=price_...
STRIPE_PRICE_ID_BUSINESS_YEARLY=price_...

# === Coinbase Commerce (Cryptocurrency Payments) ===
# Webhook endpoint: https://api.yourdomain.com/api/payments/webhook/coinbase
COINBASE_COMMERCE_API_KEY=your_coinbase_commerce_api_key
COINBASE_COMMERCE_WEBHOOK_SECRET=your_webhook_secret