HMalepe/marineflow

Premium digital systems, websites, dashboards, WhatsApp automation and business tools for South African service businesses. # Selantra WhatsApp Chatbot **Local folder:** `C:\Users\134203\Desktop\selantra whatsapp chatbot` — formerly MarineFlow; separate from **VOUCH** and independent of any other repo. **Selantra WhatsApp Chatbot** is a WhatsApp-first booking and operations bot for hair salons, barbershops, and parlors: **Twilio WhatsApp**, **Postgres**, **Redis**, staff **dashboard**, **payments** (Stripe), **loyalty** (stamp cards), **support tickets**, and **analytics**. **PCI:** Card data is handled by Stripe; this app stores Stripe IDs and metadata only—never full card numbers. ## Quick start ```bash cp .env.example .env docker compose up -d npm install npm run db:generate npm run db:migrate npm run db:seed npm run dev ``` - Health: `GET localhost` - Twilio WhatsApp webhook: `POST /webhooks/twilio/whatsapp` (configure in Twilio; set `TWILIO_WEBHOOK_BASE_URL` to your public URL for signature validation) - Dashboard: `localhost` (demo login from seed) - Stripe webhook: `POST /webhooks/stripe` ## Environment See .env.example. For Twilio signature validation, `TWILIO_WEBHOOK_BASE_URL` must match the scheme/host/path prefix Twilio uses when posting (no trailing slash on the base if your route is registered consistently). ### Why `.env` is not on GitHub (even when the repo is private) - **Private ≠ secret.** Anyone with repo access, a leaked token, or a mistaken “make public” click can see committed secrets forever in git history. - **Twilio Auth Tokens are account keys.** If they leak, someone can send messages and run up charges on your account. - **You already posted a token in chat once** — rotating tokens is easier if they were never committed. - **`.env.example`** is the template on GitHub; **`.env`** is your real copy on each machine (copy from the example and fill in values). If you need a backup, store `.env` in a password manager or an encrypted note — not in the repo. If you deploy later, use the host’s secret/env UI (Railway …