Update configuration and README for improved setup and security; disable default API and emoji sync, and enhance Discord permission checks in API routes.
This commit is contained in:
@@ -1,20 +1,24 @@
|
||||
# API URL for the dashboard backend
|
||||
NEXT_PUBLIC_API_URL=https://xxxx-xxxx-xxxx.ngrok-free.app/api/v1
|
||||
# Bot API URL (server-side — used by Next.js proxy and SSR)
|
||||
DASHBOARD_API_URL=http://127.0.0.1:8000/api/v1
|
||||
|
||||
# API Key for authentication (if used)
|
||||
NEXT_PUBLIC_DASHBOARD_API_KEY=ZYROX_SECURE_API_KEY_12345_CHANGE_THIS_ASAP_BY_CODEX_DEVS
|
||||
# Bot API key (SERVER ONLY — never use NEXT_PUBLIC_ prefix)
|
||||
DASHBOARD_API_KEY=generate_a_long_random_secret_here
|
||||
|
||||
# Legacy/public API URL (optional fallback for DASHBOARD_API_URL)
|
||||
NEXT_PUBLIC_API_URL=http://127.0.0.1:8000/api/v1
|
||||
|
||||
# NextAuth Configuration
|
||||
NEXTAUTH_URL=https://your-vercel-url-here-codex-devs.vercel.app/
|
||||
NEXTAUTH_SECRET=zyrox_nextauth_default_secret_string_2026_change_me_BY_CODEX_DEVS
|
||||
NEXTAUTH_URL=http://localhost:3000/
|
||||
NEXTAUTH_SECRET=generate_a_long_random_secret_here
|
||||
|
||||
# Discord OAuth configuration
|
||||
DISCORD_CLIENT_ID=
|
||||
DISCORD_CLIENT_SECRET=
|
||||
|
||||
# Admin User IDs (comma separated)
|
||||
NEXT_PUBLIC_ADMIN_IDS=870179991462236170
|
||||
# Dashboard admin user IDs (comma separated — your Discord user ID)
|
||||
ADMIN_IDS=YOUR_DISCORD_USER_ID_HERE
|
||||
NEXT_PUBLIC_ADMIN_IDS=YOUR_DISCORD_USER_ID_HERE
|
||||
|
||||
# Customizable Brand / Bot name shown across the dashboard
|
||||
NEXT_PUBLIC_BRAND_NAME="ZyroX"
|
||||
NEXT_PUBLIC_BRAND_NAME_WORD="ZX"
|
||||
NEXT_PUBLIC_BRAND_NAME_WORD="ZX"
|
||||
|
||||
Reference in New Issue
Block a user