btcpaymailer/.env.example
Erling c2b5d23477 Validate BTCPay webhooks with BTCPAY-SIG HMAC-SHA256
Replace URL token auth with the official webhook secret signature check.
Add SETUP.md and separate TEST_TOKEN for the Postmark test endpoint.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-06-08 12:20:00 +02:00

27 lines
751 B
Plaintext

# Image (Gitea container registry)
IMAGE_REGISTRY=git.nxtgroup.org
IMAGE_OWNER=erling
IMAGE_NAME=btcpaymailer
IMAGE_TAG=1.0.0
# Container
CONTAINER_NAME=btcpay-mailer
HOST_PORT=5000
# Required secrets
BTCPAY_WEBHOOK_SECRET=secret_from_btcpay_webhook_settings
TEST_TOKEN=generate_with_openssl_rand_hex_32
BTCPAY_API_KEY=your_btcpay_api_key
POSTMARK_API_KEY=your_postmark_server_token
# Optional
BTCPAY_URL=https://payment.nxtgroup.org
FROM_EMAIL=billing@nxtgroup.org
BCC_EMAIL=admin@nxtgroup.org,finance@nxtgroup.org
DEBUG=false
# Test Postmark after deploy (docker exec or Portainer console):
# python app.py test-email you@example.com
# Or from host:
# curl -X POST "http://localhost:5000/test-email?token=YOUR_TEST_TOKEN&to=you@example.com"