Settings
Configuration lives in environment variables (.env) — never in the database or source code.
System status
- API backend
- Database
- —
Provider configuration
Reddit/X credentials come from REDDIT_CLIENT_ID / REDDIT_CLIENT_SECRET / X_BEARER_TOKEN in .env. Forum sessions are stored AES-256-GCM encrypted using ENCRYPTION_KEY and are redacted from all logs.
Security notes
- Credentials/sessions are never returned to the frontend after submission.
- Set API_TOKEN in production to require bearer auth on every request.
- Passwords are never handled by this application at all — forum logins happen in your own browser.
- No CAPTCHA solving, anti-bot bypassing, or access-restriction circumvention is implemented by design.