Update configuration and README for improved setup and security; disable default API and emoji sync, and enhance Discord permission checks in API routes.

This commit is contained in:
TheOnlyMace
2026-07-21 16:00:52 +02:00
parent 1fdaf4dd6c
commit 127f8a032f
25 changed files with 780 additions and 434 deletions

View File

@@ -1,20 +1,24 @@
# API URL for the dashboard backend
NEXT_PUBLIC_API_URL=https://xxxx-xxxx-xxxx.ngrok-free.app/api/v1
# Bot API URL (server-side — used by Next.js proxy and SSR)
DASHBOARD_API_URL=http://127.0.0.1:8000/api/v1
# API Key for authentication (if used)
NEXT_PUBLIC_DASHBOARD_API_KEY=ZYROX_SECURE_API_KEY_12345_CHANGE_THIS_ASAP_BY_CODEX_DEVS
# Bot API key (SERVER ONLY — never use NEXT_PUBLIC_ prefix)
DASHBOARD_API_KEY=generate_a_long_random_secret_here
# Legacy/public API URL (optional fallback for DASHBOARD_API_URL)
NEXT_PUBLIC_API_URL=http://127.0.0.1:8000/api/v1
# NextAuth Configuration
NEXTAUTH_URL=https://your-vercel-url-here-codex-devs.vercel.app/
NEXTAUTH_SECRET=zyrox_nextauth_default_secret_string_2026_change_me_BY_CODEX_DEVS
NEXTAUTH_URL=http://localhost:3000/
NEXTAUTH_SECRET=generate_a_long_random_secret_here
# Discord OAuth configuration
DISCORD_CLIENT_ID=
DISCORD_CLIENT_SECRET=
# Admin User IDs (comma separated)
NEXT_PUBLIC_ADMIN_IDS=870179991462236170
# Dashboard admin user IDs (comma separated — your Discord user ID)
ADMIN_IDS=YOUR_DISCORD_USER_ID_HERE
NEXT_PUBLIC_ADMIN_IDS=YOUR_DISCORD_USER_ID_HERE
# Customizable Brand / Bot name shown across the dashboard
NEXT_PUBLIC_BRAND_NAME="ZyroX"
NEXT_PUBLIC_BRAND_NAME_WORD="ZX"
NEXT_PUBLIC_BRAND_NAME_WORD="ZX"