mirror of
https://github.com/koala73/worldmonitor.git
synced 2026-04-25 17:14:57 +02:00
36e36d8b57
- Remove PostHog analytics runtime and configuration - Add API rate limiting (api/_rate-limit.js) - Harden traffic controls across edge functions - Add runtime fallback controls and data-loader improvements - Add military base data scripts (fetch-mirta-bases, fetch-osm-bases) - Gitignore large raw data files - Settings playground prototypes
168 lines
4.8 KiB
Plaintext
168 lines
4.8 KiB
Plaintext
# ============================================
|
|
# World Monitor — Environment Variables
|
|
# ============================================
|
|
# Copy this file to .env.local and fill in the values you need.
|
|
# All keys are optional — the dashboard works without them,
|
|
# but the corresponding features will be disabled.
|
|
#
|
|
# cp .env.example .env.local
|
|
#
|
|
# ============================================
|
|
|
|
|
|
# ------ AI Summarization (Vercel) ------
|
|
|
|
# Groq API (primary — 14,400 req/day on free tier)
|
|
# Get yours at: https://console.groq.com/
|
|
GROQ_API_KEY=
|
|
|
|
# OpenRouter API (fallback — 50 req/day on free tier)
|
|
# Get yours at: https://openrouter.ai/
|
|
OPENROUTER_API_KEY=
|
|
|
|
|
|
# ------ Cross-User Cache (Vercel — Upstash Redis) ------
|
|
|
|
# Used to deduplicate AI calls and cache risk scores across visitors.
|
|
# Create a free Redis database at: https://upstash.com/
|
|
UPSTASH_REDIS_REST_URL=
|
|
UPSTASH_REDIS_REST_TOKEN=
|
|
|
|
|
|
# ------ Market Data (Vercel) ------
|
|
|
|
# Finnhub (primary stock quotes — free tier available)
|
|
# Register at: https://finnhub.io/
|
|
FINNHUB_API_KEY=
|
|
|
|
|
|
# ------ Energy Data (Vercel) ------
|
|
|
|
# U.S. Energy Information Administration (oil prices, production, inventory)
|
|
# Register at: https://www.eia.gov/opendata/
|
|
EIA_API_KEY=
|
|
|
|
|
|
# ------ Economic Data (Vercel) ------
|
|
|
|
# FRED (Federal Reserve Economic Data)
|
|
# Register at: https://fred.stlouisfed.org/docs/api/api_key.html
|
|
FRED_API_KEY=
|
|
|
|
|
|
# ------ Aircraft Tracking (Vercel) ------
|
|
|
|
# Wingbits aircraft enrichment (owner, operator, type)
|
|
# Contact: https://wingbits.com/
|
|
WINGBITS_API_KEY=
|
|
|
|
|
|
# ------ Conflict & Protest Data (Vercel) ------
|
|
|
|
# ACLED (Armed Conflict Location & Event Data — free for researchers)
|
|
# Register at: https://acleddata.com/
|
|
ACLED_ACCESS_TOKEN=
|
|
|
|
|
|
# ------ Internet Outages (Vercel) ------
|
|
|
|
# Cloudflare Radar API (requires free Cloudflare account with Radar access)
|
|
CLOUDFLARE_API_TOKEN=
|
|
|
|
|
|
# ------ Satellite Fire Detection (Vercel) ------
|
|
|
|
# NASA FIRMS (Fire Information for Resource Management System)
|
|
# Register at: https://firms.modaps.eosdis.nasa.gov/
|
|
NASA_FIRMS_API_KEY=
|
|
|
|
|
|
# ------ Railway Relay (scripts/ais-relay.cjs) ------
|
|
# The relay server handles AIS vessel tracking + OpenSky aircraft data + RSS proxy.
|
|
# It can also run the Telegram OSINT poller (stateful MTProto) when configured.
|
|
# Deploy on Railway with: node scripts/ais-relay.cjs
|
|
|
|
# AISStream API key for live vessel positions
|
|
# Get yours at: https://aisstream.io/
|
|
AISSTREAM_API_KEY=
|
|
|
|
# OpenSky Network OAuth2 credentials (higher rate limits for cloud IPs)
|
|
# Register at: https://opensky-network.org/
|
|
OPENSKY_CLIENT_ID=
|
|
OPENSKY_CLIENT_SECRET=
|
|
|
|
|
|
# ------ Telegram OSINT (Railway relay) ------
|
|
# Telegram MTProto keys (free): https://my.telegram.org/apps
|
|
TELEGRAM_API_ID=
|
|
TELEGRAM_API_HASH=
|
|
|
|
# GramJS StringSession generated locally (see: scripts/telegram/session-auth.mjs)
|
|
TELEGRAM_SESSION=
|
|
|
|
# Which curated list bucket to ingest: full | tech | finance
|
|
TELEGRAM_CHANNEL_SET=full
|
|
|
|
# ------ Railway Relay Connection (Vercel → Railway) ------
|
|
|
|
# Server-side URL (https://) — used by Vercel edge functions to reach the relay
|
|
WS_RELAY_URL=
|
|
|
|
# Optional client-side URL (wss://) — local/dev fallback only
|
|
VITE_WS_RELAY_URL=
|
|
|
|
# Shared secret between Vercel and Railway relay.
|
|
# Must be set to the SAME value on both platforms in production.
|
|
RELAY_SHARED_SECRET=
|
|
|
|
# Header name used to send the relay secret (must match on both platforms)
|
|
RELAY_AUTH_HEADER=x-relay-key
|
|
|
|
# Emergency production override to allow unauthenticated relay traffic.
|
|
# Leave unset/false in production.
|
|
ALLOW_UNAUTHENTICATED_RELAY=false
|
|
|
|
# Rolling window size (seconds) used by relay /metrics endpoint.
|
|
RELAY_METRICS_WINDOW_SECONDS=60
|
|
|
|
|
|
# ------ Public Data Sources (no keys required) ------
|
|
|
|
# UCDP (Uppsala Conflict Data Program) — public API, no auth
|
|
# UNHCR (UN Refugee Agency) — public API, no auth (CC BY 4.0)
|
|
# Open-Meteo — public API, no auth (processes Copernicus ERA5)
|
|
# WorldPop — public API, no auth needed
|
|
|
|
|
|
# ------ Site Configuration ------
|
|
|
|
# Site variant: "full" (worldmonitor.app) or "tech" (tech.worldmonitor.app)
|
|
VITE_VARIANT=full
|
|
|
|
# API base URL for web redirect. When set, browser fetch calls to /api/*
|
|
# are redirected to this URL. Leave empty for same-domain API (local installs).
|
|
# Production: https://api.worldmonitor.app
|
|
VITE_WS_API_URL=
|
|
|
|
# Client-side Sentry DSN (optional). Leave empty to disable error reporting.
|
|
VITE_SENTRY_DSN=
|
|
|
|
# Map interaction mode:
|
|
# - "flat" keeps pitch/rotation disabled (2D interaction)
|
|
# - "3d" enables pitch/rotation interactions (default)
|
|
VITE_MAP_INTERACTION_MODE=3d
|
|
|
|
|
|
# ------ Desktop Cloud Fallback (Vercel) ------
|
|
|
|
# Comma-separated list of valid API keys for desktop cloud fallback.
|
|
# Generate with: openssl rand -hex 24 | sed 's/^/wm_/'
|
|
WORLDMONITOR_VALID_KEYS=
|
|
|
|
|
|
# ------ Registration DB (Convex) ------
|
|
|
|
# Convex deployment URL for email registration storage.
|
|
# Set up at: https://dashboard.convex.dev/
|
|
CONVEX_URL=
|