Environment Variables Reference

# ============================================
# gitGost Environment Configuration
# ============================================

# -------------------- REQUIRED --------------------

# GitHub personal access token with repo permissions
# Get from: https://github.com/settings/tokens
GITHUB_TOKEN=ghp_your_actual_token_here

# -------------------- SERVER --------------------

# Server port (default: 8080)
PORT=8080

# HTTP timeouts (default: 30s)
READ_TIMEOUT=30s
WRITE_TIMEOUT=30s

# Log format: "text" or "json" (default: text)
LOG_FORMAT=json

# -------------------- AUTHENTICATION --------------------

# API key for non-git endpoints (optional, no auth if empty)
GITGOST_API_KEY=gitgost-secure-key-12345

# -------------------- DATABASE --------------------

# Supabase configuration for persistent stats (optional)
# Get from: https://supabase.com/dashboard
SUPABASE_URL=https://your-project.supabase.co
SUPABASE_KEY=your_supabase_anon_key_here

# -------------------- NOTIFICATIONS --------------------

# ntfy base URL (default: https://ntfy.sh)
NTFY_BASE_URL=https://ntfy.sh

# ntfy topic for admin alerts (optional)
NTFY_ADMIN_TOPIC=gitgost-admin-alerts

# Public service URL for ntfy action buttons
SERVICE_URL=https://gitgost.yourdomain.com

# -------------------- ADMIN & SECURITY --------------------

# Panic button password (REQUIRED for production)
# Use a strong, unique password
PANIC_PASSWORD=my-very-strong-random-password-12345

#!/bin/bash
set -e

echo "=== gitGost Environment Validation ==="

# Load .env if it exists
if [ -f .env ]; then
    export $(cat .env | grep -v '^#' | xargs)
fi

# Check required variables
if [ -z "$GITHUB_TOKEN" ]; then
    echo "❌ GITHUB_TOKEN is not set (REQUIRED)"
    exit 1
else
    echo "✅ GITHUB_TOKEN is set"
fi

# Check optional but recommended variables
if [ -z "$PANIC_PASSWORD" ]; then
    echo "⚠️  PANIC_PASSWORD is not set (recommended for production)"
else
    echo "✅ PANIC_PASSWORD is set"
fi

if [ -z "$SUPABASE_URL" ] || [ -z "$SUPABASE_KEY" ]; then
    echo "⚠️  Supabase is not configured (stats will not be persisted)"
else
    echo "✅ Supabase is configured"
fi

# Validate GitHub token
echo ""
echo "Testing GitHub API access..."
RESPONSE=$(curl -s -H "Authorization: token $GITHUB_TOKEN" https://api.github.com/user)
USERNAME=$(echo $RESPONSE | grep -o '"login":"[^"]*' | cut -d'"' -f4)

if [ -n "$USERNAME" ]; then
    echo "✅ GitHub token is valid (logged in as: $USERNAME)"
else
    echo "❌ GitHub token is invalid or lacks permissions"
    exit 1
fi

# Test Supabase connection if configured
if [ -n "$SUPABASE_URL" ] && [ -n "$SUPABASE_KEY" ]; then
    echo ""
    echo "Testing Supabase connection..."
    STATUS=$(curl -s -o /dev/null -w "%{http_code}" \
        "$SUPABASE_URL/rest/v1/" \
        -H "apikey: $SUPABASE_KEY" \
        -H "Authorization: Bearer $SUPABASE_KEY")
    
    if [ "$STATUS" != "401" ]; then
        echo "✅ Supabase connection successful (HTTP $STATUS)"
    else
        echo "❌ Supabase authentication failed (HTTP $STATUS)"
    fi
fi

echo ""
echo "=== Validation Complete ==="