Nexora Shop

The official Nexora addon that sells a panel's plans: products, orders, a wallet, card-to-card and gateway payments, a Telegram bot, a web app, discount and gift codes, referrals and agents.

Languages: English · فارسی · Русский · 中文

Install

From the panel (recommended): Services → Addons → Browse, pick Nexora Shop, answer the questions, and either let the panel install it on a host over SSH or run the command it gives you. The panel registers Shop by itself once its health check answers.

By hand, on a Linux host, as root:

curl -fsSLO https://raw.githubusercontent.com/Nexora-VPN/shop/main/install.sh
sh install.sh --method script --opt port=8095 --panel-url https://your-panel --claim-code XXXX-XXXX-XXXX-XXXX

Method	What runs
--method script	the binary under the systemd unit nexora-addon-shop
--method docker	the compose stack in deploy/compose.yml (ghcr.io/nexora-vpn/shop)

Everything lives in /opt/nexora-addons/shop: the answers in .env, the data in data/.

• Update: run sh install.sh again (or Update on its host in the panel). The answers and the data are kept.
• Remove: sh install.sh --uninstall, with --purge to delete the data. Removed with its data kept and installed again (a new install, a new claim code), Shop drops the registration it kept, registers anew, sets its admin's password to the new answer, turns its second factor off and signs it out everywhere; an update or a restart keeps both.

Option	Default
port	8095	the port Shop listens on; with HTTPS on, its only port, serving HTTPS and nothing plain (docker publishes it as it is)
database	sqlite	sqlite keeps everything in data/; postgres uses a server you run
database_dsn		PostgreSQL's connection (asked only for postgres)
admin_username	admin	Shop's own admin account
admin_password		its password, 10 characters to 72 bytes (about 36 Persian or Russian letters, 24 Chinese) — install.sh refuses another; it makes the account, and again on a new install over kept data (which also turns the admin's second factor off and signs it out everywhere) — change it in Shop afterwards
base_path	drawn	the path Shop's admin, its API and the panel's calls are under; customers' pages (/app/, /pay/) stay at the root and never show it. The panel and install.sh draw a random one; base_path= (empty) puts the admin at the root. An update keeps what the install has
public_url		where customers reach Shop, https://<host>:<port>; with HTTPS on it names Shop's port (443 when it names none), and install.sh refuses another
https	off (the panel's form: panel)	panel: a certificate from the panel's own, chosen at the install, which the panel renews and Shop fetches — any port, so Shop shares a server with the panel; acme: a certificate for the public address's domain — the port is 443; acme-http: the same on any port, the CA asking on port 80; self-signed: Shop's own, for an address by IP — the panel shows its fingerprint at the approval and trusts that certificate (browsers warn, Telegram's mini-app does not open); off: plain HTTP on the port, for your own proxy. An install from before one port keeps its two ports when updated

Then open Shop's admin at its address and its base path — install.sh prints it, the panel opens it from the addon's row. Set-up is a checklist of Shop's own work, not a wizard: the bot, your admins, the group, cards, products, sign-in, the subscription. What the panel's install did — the registration, the public address with HTTPS — shows there only when something is wrong.

Guides

Guide	What it covers
The admin web	every page, the bot's texts, the reports
Payments	card-to-card with receipts and the bank's SMS, the generic gateway, exchange rates
The web app	the portal and the Telegram mini-app, sign-in by email, SMS or the bot
Codes and referrals	discount codes, gift codes, the referral reward
Agents	levels, prepaid agents, their statement
Backup and restore	Shop's own encrypted backup, moving to a new host, after a panel restore

Customers' languages

Shop speaks Persian, English, Russian and Chinese. Under Settings, turn on the ones your customers use. Each customer is served in their own — the language of their Telegram, or the one they pick in the bot or the web app — when it is on, otherwise in English, or in the first language on. A product's form asks a name in each language turned on; a name left empty shows another language's. Turning a language off moves its customers to the nearest one on. The bot's texts can be reworded in each language (Bot texts).

Reminders, or the notifier

By default Shop tells customers about their accounts: its own reminders before expiry and the panel's warnings — expiring, expired, traffic used or used up, renewed or deleted on the panel. If you run the notifier, which does this for every account on the panel, turn Shop tells customers about expiry, traffic, renewals and deletions off under Settings, so nobody hears it twice. What Shop does itself — a purchase, a receipt, the wallet, an automatic renewal that the wallet could not pay — is still told by Shop.

When the panel has no room

Shop checks no licence of its own: the panel does. When the panel refuses a new account because its licence is full, Shop owns up to it plainly: the order's money goes back to the customer's wallet at once, the customer is told why, your admins' Telegram topic is told with the panel's own words, and new services and trials pause for an hour so the next customers are not taken in by the same refusal. Renewals and more traffic go on. Upgrade the panel's licence or make room, then press Reopen sales on the dashboard.

Files

File	What it is
nexora-addon.json	the manifest, signed by Nexora; the directory and the panel read it here
install.sh	install, update or remove on a Linux host
deploy/compose.yml	the stack the docker method runs

Releases carry the binaries for linux-amd64 and linux-arm64 with their SHA256SUMS, and SHA256SUMS.sig, Nexora's signature over it: the panel installs Shop over SSH only when install.sh and the binary match it. Shop is free and closed-source — see LICENSE.