API keys have been moved to environment variables for security. The actual keys are stored in the .env file which is NOT tracked by git.
cd express
cp .env.example .envEdit the .env file and replace the placeholder values with your actual API keys:
# API Keys - REPLACE WITH YOUR ACTUAL KEYS!
GEMINI_API_KEY=your_actual_gemini_api_key_here
YOUTUBE_API_KEY=your_actual_youtube_api_key_here- Go to Google AI Studio
- Create a new API key
- Copy and paste it into your
.envfile
- Go to Google Cloud Console
- Create a new project or select existing one
- Enable YouTube Data API v3
- Create credentials (API Key)
- Copy and paste it into your
.envfile
GEMINI_API_KEY- For AI-powered recommendationsYOUTUBE_API_KEY- For fetching video resourcesMONGODB_URI- Database connection stringSESSION_SECRET- Session encryption keyNODE_ENV- Environment modeSKIP_SEEDING- Skip database seeding on startup
- ✅ API keys are in
.envfile (not tracked by git) - ✅
.env.exampleprovided as template - ✅ Validation warnings for missing keys
- ✅ No hardcoded credentials in source code