Security: Refactor to map API keys and sensitive tokens to environment variables using dotenv

.gitignore

@@ -27,3 +27,6 @@ Thumbs.db
 *.txt
 logs hf
 !requirements.txt
+
+# Secrets
+.env

executable_code/app.py

@@ -1,5 +1,9 @@
 import os
 import re
+from dotenv import load_dotenv
+
+# Load secret keys from .env file
+load_dotenv()
 import csv
 import json
 import warnings
@@ -87,7 +91,7 @@ crop_durations = {
 }
 
 def fetch_weather_data(location):
-    api_key = '3b0880537a825f35ec5cc49574db842e'
+    api_key = os.environ.get('WEATHER_API_KEY')
     base_url = f'http://api.openweathermap.org/data/2.5/weather?q={location}&appid={api_key}&units=metric'
     try:
         response = requests.get(base_url, timeout=5)
@@ -260,7 +264,7 @@ def recommend_crop(user_message):
                 try:
                     # Market Data API call... (kept same logic)
                     url = "https://api.data.gov.in/resource/35985678-0d79-46b4-9ed6-6f13308a1d24"
-                    api_key = "579b464db66ec23bdd000001cdd3946e44ce4aad7209ff7b23ac571b"
+                    api_key = os.environ.get('MARKET_API_KEY')
                     params = {"api-key": api_key, "format": "json", "limit": "50", "filters[Commodity]": crop, "filters[District]": district, "filters[State]": state}
                     res = requests.get(url, params=params, timeout=5)
                     records = res.json().get("records", [])
@@ -362,7 +366,7 @@ def handle_soil_conditions(user_message):
 if __name__ == '__main__':
     # Initialize Ngrok for exposure (Optional)
     # Get your token from: https://dashboard.ngrok.com/get-started/your-authtoken
-    token = "2jB3oS2xptgkYHLMldb5uNwjHEF_3k3Q4UuBthT1xD6nyitXA" # From notebook
+    token = os.environ.get('NGROK_TOKEN')
     if token:
         try:
             ngrok.set_auth_token(token)

requirements.txt

@@ -17,3 +17,4 @@ matplotlib
 plotly
 scipy
 torch
+python-dotenv