From 04b35e4df67df2253b526a7074b708449e504eff Mon Sep 17 00:00:00 2001 From: Head of Product & Engineering Date: Mon, 6 Apr 2026 17:42:27 +0200 Subject: [PATCH] docs: update .env.example for RSA webhook key and optional Ed25519 key Co-Authored-By: SideKx --- .env.example | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/.env.example b/.env.example index b73c655..b57deab 100644 --- a/.env.example +++ b/.env.example @@ -8,9 +8,14 @@ LETSENCRYPT_EMAIL=ops@cast.ph # GHL OAuth GHL_CLIENT_ID= GHL_CLIENT_SECRET= -# Ed25519 public key from GHL Marketplace app settings (PKIX PEM). Paste the full PEM block. +# RSA public key (PKIX PEM) used to verify x-wh-signature on incoming webhooks. +# This is a static key published in GHL docs — not from your app settings. +# Paste the full multi-line PEM block, or use \n-escaped single-line format. GHL_WEBHOOK_PUBLIC_KEY= GHL_CONVERSATION_PROVIDER_ID= +# Ed25519 public key for X-GHL-Signature (GHL migration, expected July 2026). +# Leave empty until GHL publishes this key and activates the new header. +GHL_WEBHOOK_ED25519_KEY= # Cast.ph CAST_API_KEY=