Step 1: Firebase Setup (The Database)

Set security rules

Go to the Rules tab in Firestore and replace the rules with the following. As of v4.2.1, the frontend never talks to Firestore directly — it only talks to your Render backend, which uses the Admin SDK (which always bypasses these rules regardless of what they say). So there’s no reason for any client-side reads or writes to be allowed:

rules_version = '2';
service cloud.firestore {
  match /databases/{database}/documents {
    match /{document=**} {
      // Deny all direct client access. The Admin SDK (your Render backend)
      // bypasses these rules entirely, so this only blocks browsers/apps
      // that try to read or write Firestore directly with a client SDK.
      allow read, write: if false;
    }
  }
}

If you’re upgrading from an older versionEarlier versions of this project shipped a public firebaseConfig in the frontend with permissive allow read: if true rules — this let anyone who inspected the page source read your entire chat database directly, bypassing the login screen. If you’re on v4.2.1 or later, switch to the rules above and make sure your index.html has no firebaseConfig or Firebase SDK <script> tags left in it (see Setup the Frontend).

Get backend credentials (service account)

Go to Project Settings (gear icon) → Service accounts.

Click Generate new private key.

This downloads a .json file.

Keep this safeThis file grants admin access to your database. You’ll paste its contents into a Render environment variable in the next step — never commit it to a public repo.

That’s everything you need from Firebase — the frontend doesn’t need any Firebase configuration at all. It only ever talks to your Render backend, which uses the service account credentials above.

Home

WhatsApp Logger

Git Mirror

Mojic

Githrun

Veyrix IDE

OSMA

Step 1: Firebase Setup (The Database)

Create the database

Set security rules

Get backend credentials (service account)

​Create the database

​Set security rules

​Get backend credentials (service account)

Create the database

Set security rules

Get backend credentials (service account)