Changeset f574435 in Klonkt for .env.example

Timestamp:

07/21/2026 03:45:36 AM (7 weeks ago)

Author:

Robin <roboburr@…>

Branches:

main

Children:

e2ea5c4

Parents:

4590e66

git-author:

Robin <roboburr@…> (07/21/2026 03:45:33 AM)

git-committer:

Robin <roboburr@…> (07/21/2026 03:45:36 AM)

Message:

Docs: README + .env.example for paid posts and auto-generated keys

Tell users how the paid-posts key works: no env editing needed, it's
generated on first use like SESSION_SECRET already is. Plus a general pass
for missing features.

Changed files:
README.md

• "What it does": Paid posts (own Patreon, passkey unlock, no visitor account/cookie, patron identity never stored)
• Configuration table: PAID_SECRET (auto) + KLONKT_PREMIUM_ENABLED; SESSION_SECRET marked auto (matches .env.example, not "required")
• new "Auto-generated secrets & backups" section: where the keys live, why PAID_SECRET is outside the DB, and to back up storage/ as a whole
• Stack: link to FEDERATION.md

.env.example

• PAID_SECRET block (auto-generate, or openssl rand -base64 32)
• paid posts added to the premium-extras list

-robo
Co-Authored-By: Claude Opus 4.8 <noreply@…>

File:

• .env.example (modified) (2 diffs)

.env.example

@@ -11 +11 @@
 # restarts/updates). Or set your own: openssl rand -hex 32
 SESSION_SECRET=
+# Encrypts the stored Patreon secrets for paid posts. Same deal: leave EMPTY to
+# auto-generate on first use (saved to storage/.paid-secret, kept outside the DB
+# so a database dump alone stays useless). Or set your own: openssl rand -base64 32
+PAID_SECRET=
 DATABASE_PATH=./storage/database.sqlite
 MEDIA_PATH=./storage/media
@@ -52 +56 @@
 # The core app, all updates and Cirkels are free. A handful of extras
 # (newsletter, statistics, EPK, link-in-bio, embeddable player, show agenda,
-# release planning, download-for-email) are unlocked by a one-time Patreon
-# supporter link — that's what funds the project:
+# release planning, download-for-email, paid posts) are unlocked by a one-time
+# Patreon supporter link — that's what funds the project:
 # klonkt.com / patreon.com/c/roboburr. Leave this on.
 KLONKT_PREMIUM_ENABLED=on