A modern, open-source Web3 portal for developers. Secure crypto payments, AI-powered blogging, and mobile-ready deployment.
Accept cryptocurrency deposits via NOWPayments. Support for 50+ currencies including BTC, ETH, USDT, and more. Webhook-verified transactions with idempotent balance crediting.
Write and publish blog posts with AI assistance. Uses a BYOK (Bring Your Own Key) model - your API keys never touch our servers. Supports AiAssist.net integration with streaming responses.
Cookie-based session management with bcrypt password hashing. Session rotation on login prevents fixation attacks. HttpOnly, Secure, SameSite=Strict cookies for maximum protection.
Generate app keys for API access. Manage multiple applications from a single dashboard. Full admin panel for content and user management.
Built with Capacitor for iOS and Android deployment. Secure storage integration uses iOS Keychain and Android Keystore for sensitive data.
| Layer | Technology |
|---|---|
| Frontend | React 18, TypeScript, Vite |
| Styling | Tailwind CSS, shadcn/ui, Framer Motion |
| Backend | Express.js, TypeScript |
| Database | Redis |
| Auth | express-session, bcrypt, connect-redis |
| Payments | NOWPayments API |
| Mobile | Capacitor |
- Node.js 22+
- Redis
# Clone the repository
git clone https://github.com/ethgr0wth/web3-shell-starter.git
cd web3-shell-starter
# Install dependencies
npm ci
# Set up environment
cp .env.example .env
# Edit .env with your secrets
# Start Redis
redis-server
# Run development server
npm run devVisit http://localhost:5000
| Variable | Required | Description |
|---|---|---|
SESSION_SECRET |
Yes | Session encryption key (32+ chars) |
NOWPAYMENTS_API_KEY |
For payments | NOWPayments API key |
NOWPAYMENTS_IPN_SECRET |
For payments | Verifies NOWPayments webhook signatures |
REDIS_URL |
No | Redis connection string |
web3-shell/
├── client/ # React frontend
│ └── src/
│ ├── components/ # UI components
│ ├── lib/ # Utilities and contexts
│ └── pages/ # Route pages
├── server/ # Express backend
│ ├── routes.ts # API endpoints
│ ├── storage.ts # Redis data layer
│ └── nowpayments.ts # Payment integration
├── shared/ # Shared types
│ └── schema.ts # Zod schemas
└── scripts/ # Utility scripts
| Endpoint | Method | Description |
|---|---|---|
/api/auth/register |
POST | Create account |
/api/auth/login |
POST | Login |
/api/auth/logout |
POST | Logout |
/api/auth/me |
GET | Get current user |
| Endpoint | Method | Description |
|---|---|---|
/api/blog/posts |
GET | List published posts |
/api/blog/posts/:slug |
GET | Get post by slug |
/api/blog/posts |
POST | Create post |
/api/blog/posts/:id |
PATCH | Update post |
| Endpoint | Method | Description |
|---|---|---|
/api/payments/create |
POST | Create payment invoice |
/api/payments/:id/status |
GET | Check payment status |
See AGENTS.md for complete API documentation.
- Import repository to Replit
- Add secrets in the Secrets tab
- Click Run
npm run build
NODE_ENV=production node dist/index.cjs# iOS
npx cap add ios
npx cap sync ios
npx cap open ios
# Android
npx cap add android
npx cap sync android
npx cap open androidSee DEPLOYMENT.md for detailed instructions.
- Passwords hashed with bcrypt (12 rounds)
- Session rotation on login
- HMAC-verified payment webhooks
- Idempotent transaction processing
- BYOK model - AI keys stored client-side only
- Capacitor Secure Storage for mobile
Please report vulnerabilities privately as described in SECURITY.md.
| Document | Description |
|---|---|
| DEPLOYMENT.md | Production deployment guide |
| AGENTS.md | Technical reference for AI agents |
| FORK.md | Guide for forking the project |
| CONTRIBUTING.md | Contribution guidelines |
We welcome contributions! Please read CONTRIBUTING.md for guidelines.
# Create a feature branch
git checkout -b feature/your-feature
# Make changes and commit
git commit -m "Add your feature"
# Push and create PR
git push origin feature/your-featureMIT License - see LICENSE for details.
- shadcn/ui - UI components
- NOWPayments - Crypto payment processing
- Capacitor - Mobile deployment
- Redis - Data storage
Built with care for the Web3 developer community.