fix: Strict env enforcement, rock-solid Alpine portal rendering, and Nabeh/Redis test diagnostics

2026-08-26 22:25:35 +03:00
parent 388944cbff
commit 1f024d0c30
10 changed files with 990 additions and 702 deletions
@@ -0,0 +1,47 @@
+# ==============================================================================
+# SAQEL PLATFORM — STRICT ENVIRONMENT CONFIGURATION (.env)
+# Rule: NO fallback defaults. Every variable below is strictly required.
+# ==============================================================================
+
+# 1. Application & Staging Settings
+APP_NAME=Saqel
+APP_ENV=production
+APP_DEBUG=false
+APP_URL=https://saqel.intaleqapp.com
+ALLOWED_ORIGIN=https://saqel.intaleqapp.com
+
+# 2. Database Configuration (MySQL 8.4)
+DB_HOST=127.0.0.1
+DB_PORT=3306
+DB_DATABASE=saqel
+DB_USERNAME=saqel_user
+DB_PASSWORD=YOUR_STRONG_DB_PASSWORD
+
+# 3. Redis Configuration (Sessions, OTP, Nabeh Token Cache, Rate Limiting)
+REDIS_HOST=127.0.0.1
+REDIS_PORT=6379
+REDIS_PASSWORD=
+
+# 4. Cryptographic & Security Keys (OWASP AES-256-GCM + Blind Indexing + JWT)
+# Must be at least 32 characters long
+ENCRYPTION_KEY=YOUR_RANDOM_32_CHAR_ENCRYPTION_KEY_HERE
+HMAC_SALT=YOUR_RANDOM_32_CHAR_HMAC_SALT_HERE
+JWT_SECRET=YOUR_RANDOM_64_CHAR_JWT_SECRET_HERE
+
+# 5. Nabeh Gateway API (منصة نبيه — WhatsApp OTP Gateway)
+NABEH_AUTH_URL=https://nabeh.intaleqapp.com/api/auth/login
+NABEH_SEND_URL=https://nabeh.intaleqapp.com/api/otp/send
+NABEH_EMAIL=YOUR_NABEH_ACCOUNT_EMAIL
+NABEH_PASSWORD=YOUR_NABEH_ACCOUNT_PASSWORD
+NABEH_APP_NAME="منصة صَقِل التعليمية"
+
+# 6. Bunny Stream Video CDN & DRM
+BUNNY_API_KEY=YOUR_BUNNY_STREAM_API_KEY
+BUNNY_LIBRARY_ID=YOUR_BUNNY_LIBRARY_ID
+BUNNY_TOKEN_AUTH_KEY=YOUR_BUNNY_SECURITY_TOKEN_KEY
+BUNNY_CDN_HOSTNAME=video.saqel.com
+
+# 7. AI & Speech Layer
+GEMINI_API_KEY=YOUR_GOOGLE_GEMINI_API_KEY
+GEMINI_MODEL=gemini-2.5-flash
+GROQ_API_KEY=YOUR_GROQ_WHISPER_API_KEY