FM / canhelp

/opt/canhelp

Name	Size	Mode	Actions
.git/	-	0755	rm
.github/	-	0755	rm
apps/	-	0755	rm
backups/	-	0755	rm
logs/	-	0755	rm
node_modules/	-	0755	rm
packages/	-	0755	rm
scripts/	-	0755	rm
uploads/	-	0755	rm
.env	3735	0644	edit dl rm
.env.example	1978	0644	edit dl rm
.gitignore	1071	0644	edit dl rm
CLAUDE.md	3482	0644	edit dl rm
deploy.log	568	0644	edit dl rm
DEPLOY.md	3871	0644	edit dl rm
docker-compose.yml	835	0644	edit dl rm
ecosystem.config.js	983	0644	edit dl rm
find_missing_keys.js	990	0644	edit dl rm
package-lock.json	201512	0644	edit dl rm
package.json	1395	0644	edit dl rm
ru_keys.txt	28768	0644	edit dl rm
STACK.md	3745	0644	edit dl rm
turbo.json	462	0644	edit dl rm
uk_keys.txt	28768	0644	edit dl rm

Edit: /opt/canhelp/.env.example (1978B)

NODE_ENV=development

# API
API_PORT=4000
WEB_URL=http://localhost:3000
# Public API URL for browser (client-side) requests
NEXT_PUBLIC_API_URL=http://localhost:4000
# Internal API URL for SSR requests (server → API, bypasses external DNS/Cloudflare)
# On production set to http://localhost:4000 so Next.js SSR hits the API directly
INTERNAL_API_URL=http://localhost:4000

# Database
DATABASE_URL=postgresql://canhelp:canhelp@localhost:5433/canhelp

# Redis
REDIS_URL=redis://localhost:6379

# Better Auth — generate with: openssl rand -hex 32
BETTER_AUTH_SECRET=change-me-to-a-random-32-char-secret
BETTER_AUTH_URL=http://localhost:4000
# Optional debug endpoint protection token for /api/health/debug
HEALTH_DEBUG_TOKEN=

# Localisation
DEFAULT_LOCALE=el
FALLBACK_LOCALE=en
DEFAULT_CURRENCY=EUR

# Uploads
UPLOAD_DIR=./uploads
MAX_FILE_SIZE_MB=5

# Email (Resend) — get key at resend.com
RESEND_API_KEY=
FROM_EMAIL=noreply@canhelp.gr

# Cloudflare Turnstile (CAPTCHA)
# Get keys at: https://dash.cloudflare.com → Turnstile
TURNSTILE_SECRET_KEY=

# Google OAuth (Sign-In + Calendar)
GOOGLE_CLIENT_ID=
GOOGLE_CLIENT_SECRET=
GOOGLE_CALENDAR_REDIRECT_URI=http://localhost:4000/api/google/calendar/callback

# Apple OAuth (Sign in with Apple)
# APPLE_CLIENT_SECRET is generated dynamically at runtime from your AuthKey_*.p8
APPLE_CLIENT_ID=gr.canhelp.app
APPLE_TEAM_ID=
APPLE_KEY_ID=
# One of the two is required for auto-generation:
# APPLE_PRIVATE_KEY: full PEM content (newlines can be escaped as \n)
# APPLE_PRIVATE_KEY_PATH: absolute path to AuthKey_*.p8 on server
APPLE_PRIVATE_KEY=
APPLE_PRIVATE_KEY_PATH=

# AI Translation (auto-translate task listings)
# TRANSLATE_PROVIDER=anthropic   # anthropic (default) | openai
ANTHROPIC_API_KEY=
OPENAI_API_KEY=

# Push notifications (Firebase Cloud Messaging HTTP v1)
# Fill values from Firebase service account JSON key.
FCM_PROJECT_ID=
FCM_CLIENT_EMAIL=
# Keep newlines escaped (\\n) when storing in .env
FCM_PRIVATE_KEY=

NODE_ENV=development # API API_PORT=4000 WEB_URL=http://localhost:3000 # Public API URL for browser (client-side) requests NEXT_PUBLIC_API_URL=http://localhost:4000 # Internal API URL for SSR requests (server → API, bypasses external DNS/Cloudflare) # On production set to http://localhost:4000 so Next.js SSR hits the API directly INTERNAL_API_URL=http://localhost:4000 # Database DATABASE_URL=postgresql://canhelp:canhelp@localhost:5433/canhelp # Redis REDIS_URL=redis://localhost:6379 # Better Auth — generate with: openssl rand -hex 32 BETTER_AUTH_SECRET=change-me-to-a-random-32-char-secret BETTER_AUTH_URL=http://localhost:4000 # Optional debug endpoint protection token for /api/health/debug HEALTH_DEBUG_TOKEN= # Localisation DEFAULT_LOCALE=el FALLBACK_LOCALE=en DEFAULT_CURRENCY=EUR # Uploads UPLOAD_DIR=./uploads MAX_FILE_SIZE_MB=5 # Email (Resend) — get key at resend.com RESEND_API_KEY= FROM_EMAIL=noreply@canhelp.gr # Cloudflare Turnstile (CAPTCHA) # Get keys at: https://dash.cloudflare.com → Turnstile TURNSTILE_SECRET_KEY= # Google OAuth (Sign-In + Calendar) GOOGLE_CLIENT_ID= GOOGLE_CLIENT_SECRET= GOOGLE_CALENDAR_REDIRECT_URI=http://localhost:4000/api/google/calendar/callback # Apple OAuth (Sign in with Apple) # APPLE_CLIENT_SECRET is generated dynamically at runtime from your AuthKey_*.p8 APPLE_CLIENT_ID=gr.canhelp.app APPLE_TEAM_ID= APPLE_KEY_ID= # One of the two is required for auto-generation: # APPLE_PRIVATE_KEY: full PEM content (newlines can be escaped as \n) # APPLE_PRIVATE_KEY_PATH: absolute path to AuthKey_*.p8 on server APPLE_PRIVATE_KEY= APPLE_PRIVATE_KEY_PATH= # AI Translation (auto-translate task listings) # TRANSLATE_PROVIDER=anthropic # anthropic (default) | openai ANTHROPIC_API_KEY= OPENAI_API_KEY= # Push notifications (Firebase Cloud Messaging HTTP v1) # Fill values from Firebase service account JSON key. FCM_PROJECT_ID= FCM_CLIENT_EMAIL= # Keep newlines escaped (\\n) when storing in .env FCM_PRIVATE_KEY=