feature

server/config/nutgram.php

@@ -5,8 +5,10 @@ return [
     'token' => env('TELEGRAM_BOT_TOKEN', env('TELEGRAM_TOKEN')),
 
 
-    // if the webhook mode must validate the incoming IP range is from a telegram server
-    'safe_mode' => env('APP_ENV', 'local') === 'production',
+    // Nutgram LaravelWebhook secret check (md5(APP_KEY) when true via package default).
+    // Keep false — TelegramWebhookController validates TELEGRAM_WEBHOOK_SECRET instead.
+    // Production + true + no matching secret_token = updates silently dropped (no reply).
+    'safe_mode' => (bool) env('NUTGRAM_SAFE_MODE', false),
 
     // Extra or specific configurations
     'config' => [],