docs+deploy: Paddle env, webhook route, collections, CI build args, and spec status

2026-07-27 10:55:41 +01:00
parent 8bbecd2035
commit 3537ec59dc
3 changed files with 10 additions and 1 deletions
@@ -57,6 +57,13 @@ services:
            SMTP_FROM: ${SMTP_FROM:-}
            APP_LOGIN_URL: ${APP_LOGIN_URL:-}
            FREE_INSTANCE_REAP_AFTER: "336h"
+            # Paddle billing. PADDLE_API_KEY and PADDLE_WEBHOOK_SECRET are
+            # boot-REQUIRED — an unverified webhook endpoint is one anyone can
+            # issue licences through. PADDLE_ENV selects which catalogue price
+            # IDs are served (sandbox|production).
+            PADDLE_ENV: ${PADDLE_ENV:-sandbox}
+            PADDLE_API_KEY: ${PADDLE_API_KEY:-}
+            PADDLE_WEBHOOK_SECRET: ${PADDLE_WEBHOOK_SECRET:-}

    # The staff and customer console, served at vantage-hq.hostxtra.co.uk.
    # ADMIN_API_URL is baked into the image at build time, not read here, so