railway.variables.example

# Paste into Railway → Web service → Variables → Raw Editor
# (Replace service names if yours differ: IRB-Ultimate / MySQL)

NODE_ENV=production
JWT_SECRET=<same value as GitHub secret JWT_SECRET>
VITE_APP_ID=irb-sa-prod
OWNER_OPEN_ID=dev-owner-001
PILOT_LOGIN_ENABLED=1
PILOT_LOGIN_TOKEN=<same value as GitHub secret PILOT_LOGIN_TOKEN>
DATABASE_URL=${{MySQL.MYSQL_URL}}
# Entries may use * wildcards (one hostname label per *). The Vercel preview
# pattern keeps per-deployment URLs (irb-saudi-arabia-<hash>-<team>.vercel.app)
# working. Proxied same-origin requests are accepted automatically via
# X-Forwarded-Host, so this list only matters for true cross-origin callers.
ALLOWED_ORIGINS=https://irb-saudi-arabia.vercel.app,https://irb-saudi-arabia-*-researcher-os.vercel.app,https://${{IRB-Ultimate.RAILWAY_PUBLIC_DOMAIN}}

# AI review (MiniMax) — without these every AI feature degrades to
# "AI unavailable".
LLM_API_URL=https://api.minimax.io
LLM_API_KEY=<MiniMax API key>
LLM_MODEL=MiniMax-M2
LLM_MAX_TOKENS=24576
LLM_PROVIDER=openai