sat.trackr.live/.env.dev.example at main · CyberSecDef/sat.trackr.live · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
# =============================================================================
# .env.dev — Development overlay (loaded after .env when APP_ENV=dev)
# =============================================================================
# Copy this file to .env.dev. Real .env.dev is gitignored.
# =============================================================================

# Path to the SQLite database (relative to repo root, or absolute).
DB_PATH="data/sat.db"

# Cesium ion token. Leave empty to use the OpenStreetMap fallback imagery
# provider (no token required, slightly less polished but fully functional).
# Sign up free at https://cesium.com/ion/signup to get a token.
CESIUM_ION_TOKEN=

# Origin of the Vite dev server (used by PHP to inject HMR client URL).
# Override to your LAN IP if testing from another device:
#   VITE_DEV_ORIGIN="http://192.168.0.205:5173"
VITE_DEV_ORIGIN="http://localhost:5173"

# --- External API credentials (Phase 2 onward) ---

# Space-Track.org (free account; chunk 4 uses for decay/TIP messages
# and on-demand historical TLEs). Sign up: https://www.space-track.org
SPACE_TRACK_USER=""
SPACE_TRACK_PASS=""

# N2YO API (free key, 1000 req/hr; chunk 6 uses to enhance pass-prediction
# visual magnitude). Sign up: https://www.n2yo.com/api/
N2YO_API_KEY=""

# Launch Library 2 (chunk 3 uses for upcoming + previous launches).
# Free tier 15 req/hr; paid personal tier $5/mo removes the limit.
# Sign up: https://thespacedevs.com/llapi
LL2_API_TOKEN=""

# --- Phase 8 chunk 6 — Plausible analytics (cookieless, GDPR-safe) ---

# data-domain attribute for the Plausible snippet. Leave empty to omit
# the analytics tag entirely (the default — production-default still
# requires a real domain to ship traffic). Honors the user's DNT
# header server-side AND the localStorage `sat:disableAnalytics='1'`
# opt-out the §Settings panel writes.
PLAUSIBLE_DOMAIN=""

# Full URL of the Plausible tracker script.
# - Cloud (default):    https://plausible.io/js/script.js
# - Self-hosted (e.g.): https://stats.example.com/js/plausible.js
PLAUSIBLE_SCRIPT_URL="https://plausible.io/js/script.js"

# --- Phase 10 chunk 2 — TLE ingest reject-rate alerting ---

# Slack-compatible incoming-webhook URL (also works with Discord +
# Mattermost). Leave empty to disable alerts entirely — ingesters
# still log rejection counts via Monolog, but no POSTs go out.
# Per-ingester thresholds (locked in docs/phase10.md § II row 4):
#   CelesTrak  1 %, SpaceTrack 5 %, LL2 10 %, SOCRATES 5 %
# Dedupe window: 30 minutes per (ingester, ratio-band).
INGEST_ALERT_WEBHOOK_URL=""

# --- Phase 10 chunk 4 — push-based ingest webhook receiver ---

# Bearer-token shared secret for POST /webhooks/ingest/{source}.
# Empty (default) → endpoint returns 403 on every request; the
# pure-cron pull flow keeps working unchanged.
#
# To use: generate a strong secret (`openssl rand -hex 32`), set
# it here AND on any caller (e.g. GitHub Action that watches the
# CelesTrak feed for mtime changes). See docs/deploy.md "Push-
# based ingest" for the curl example.
#
# Rate limit per (source, IP): 1 request per 60 seconds. Source
# allowlist: celestrak / spacetrack / ll2 / socrates / swpc /
# ovation / satnogs / satnogs-stations.
WEBHOOK_SECRET=""