# MAX Bot token from BotFather-like UI in MAX
BOT_TOKEN=

# Shared secret used to authenticate webhook requests from MAX.
# Generated by `make subscribe` or any 32+ byte random string.
MAX_BOT_API_SECRET=

# Public HTTPS URL where MAX will POST updates.
# Fill in with your own tunnel / reverse proxy / public hostname.
WEBHOOK_URL=https://your-public-host.example/webhook

# Optional: HTTPS URL of a web app registered against this bot in Botfather.
# When empty, the OpenApp button is skipped in /keyboard (MAX returns 404 for unregistered apps).
WEB_APP_URL=

# Optional: when set, /debug on uses this chat for Debugs::sendText()
DEBUG_CHAT_ID=

# Self-test CLI target chat
SELFTEST_CHAT_ID=

# Diagnostics
APP_ENV=dev
APP_DEBUG=true