.env.example

# Get this from @BotFather on Telegram
TELEGRAM_BOT_TOKEN=your_bot_token_here

# Find this in your Cloudflare dashboard → R2 → Overview → Account ID
CF_ACCOUNT_ID=your_cloudflare_account_id

# Create an API token in Cloudflare → R2 → Manage R2 API Tokens
CF_ACCESS_KEY_ID=your_r2_access_key_id
CF_SECRET_ACCESS_KEY=your_r2_secret_access_key

# Comma-separated names of your R2 buckets (you can add as many as you want)
CF_BUCKET_NAMES=my-bucket,my-other-bucket

# Optional: custom domains for your buckets (format: bucket-name=https://domain.com)
# If set, files will be served via the public domain instead of expiring presigned URLs
# Leave empty or remove if you have not connected a custom domain in Cloudflare R2
CF_BUCKET_DOMAINS=my-bucket=https://files.example.com,my-other-bucket=https://media.example.com

# Comma-separated Telegram user IDs allowed to use this bot
# To find your user ID, message @userinfobot on Telegram
ALLOWED_TELEGRAM_USER_IDS=123456789,987654321

# Optional: how long presigned view links are valid (in seconds, default: 3600 = 1 hour)
PRESIGNED_URL_EXPIRY=3600

# Optional: maximum upload size in bytes (default: 52428800 = 50MB)
MAX_FILE_SIZE_BYTES=52428800

# Optional: directory for persistent session storage (default: ./data/sessions)
# Sessions survive process restarts when persisted to disk
SESSIONS_DIR=./data/sessions

# Optional: rate limiting configuration (default: 30 requests per minute)
RATE_LIMIT_WINDOW_MS=60000
RATE_LIMIT_MAX_REQUESTS=30

# Optional: audit logging configuration (default: enabled)
AUDIT_ENABLED=true
AUDIT_LOGS_DIR=./data/audit