feat: manage epay settings securely

2026-07-29 16:36:35 +08:00
parent 9a20b748e0
commit d956da2993
22 changed files with 921 additions and 52 deletions
@@ -73,6 +73,14 @@ NEXT_PUBLIC_SUPABASE_ANON_KEY=...
 SUPABASE_SERVICE_ROLE_KEY=...
 ADMIN_EMAILS=...

+# Required to save/read database-backed 易支付 settings. Base64 decoding must
+# produce exactly 32 random bytes. Generate independently; never reuse auth keys.
+EPAY_CONFIG_ENCRYPTION_KEY=<independent-base64-encoded-32-byte-key>
+# Legacy EPAY_GATEWAY_URL / EPAY_PID / EPAY_KEY / EPAY_NOTIFY_URL /
+# EPAY_RETURN_URL / EPAY_SITE_NAME remain fallback-only when no database row exists.
+# Online packages stay hidden by default; only explicit true enables the fallback.
+EPAY_CHAT_ENABLED=false
+
 # Conversational birth-time rectification rollout controls.
 # Keep migrations false until the ordered database gate below has passed.
 RECTIFICATION_PRICE_CREDITS=3