# Get this from @BotFather on Telegram

TELEGRAM_BOT_TOKEN=

# Get this from https://cloud.cerebras.ai (any OpenAI-compatible provider works)

AI_API_KEY=

AI_BASE_URL=https://api.cerebras.ai/v1

AI_MODEL=gpt-oss-120b

# Optional: enable conversation memory, rate limit, and dedupe by

# pointing at a SQLite file. Without this the bot runs in stateless

# mode (replies still work, but no per-user history). On PA use:

# SQLITE_PATH=/home/<your-pa-username>/bot.db

# SQLITE_PATH=

# Optional: random secret to verify webhook requests come from Telegram (recommended)

# Generate one with: openssl rand -hex 16

# WEBHOOK_SECRET=

# Optional: when set, the bot auto-registers this URL as the Telegram

# webhook on worker boot + after every /api/deploy. No manual setWebhook

# step needed. Leave unset for local polling.

# WEBHOOK_URL=https://<your-pa-username>.pythonanywhere.com/api/webhook

# Optional: Hugging Face Gradio Space — enables the /model command

# HF_SPACE_ID=edisimon/armgpt-demo

# HF_TOKEN=

# Optional: label shown by /about under "Hosting:". Default is "PythonAnywhere".

# HOSTING_LABEL=

# Optional: comma-separated whitelist of allowed Telegram users. Each

# entry is a username (with or without leading @) or a numeric user_id.

# When empty (default), the bot responds to everyone. When set, the bot

# stays silent for anyone not in the list — no rejection reply, so

# unauthorized users can't confirm the bot exists.

# Example: ALLOWED_USERS=@alice,bob,123456789

# ALLOWED_USERS=

# Optional: enables /api/deploy auto-deploy webhook. Set the same value

# as a GitHub repo secret named DEPLOY_SECRET so the deploy workflow

# can hit it. When unset, /api/deploy returns 403 (fail-closed).

# Generate with: openssl rand -hex 32

# DEPLOY_SECRET=

# Only needed if you want to use scripts/pa_deploy.sh (one-command PA deploy

# driven from your laptop). Your PythonAnywhere username and an API token

# from https://www.pythonanywhere.com/account/#api_token

# PA_USERNAME=

# PA_API_TOKEN=