.env.example

# Application
NODE_ENV=development
PORT=3000
API_URL=http://localhost:3000

# Database
SUPABASE_URL=https://your-project.supabase.co
SUPABASE_ANON_KEY=your-anon-key
SUPABASE_SERVICE_KEY=your-service-role-key
SUPABASE_SERVICE_ROLE_KEY=your-service-role-key
DATABASE_URL=postgresql://postgres:password@db.your-project.supabase.co:5432/postgres

# Stellar
STELLAR_NETWORK=testnet
STELLAR_HORIZON_URL=https://horizon-testnet.stellar.org
STELLAR_SOROBAN_URL=https://soroban-testnet.stellar.org
STELLAR_NETWORK_PASSPHRASE=Test SDF Network ; September 2015

# Smart Contract IDs (deployed smart contracts)
REPUTATION_CONTRACT_ID=
CREDITLINE_CONTRACT_ID=
MERCHANT_REGISTRY_CONTRACT_ID=
LIQUIDITY_POOL_CONTRACT_ID=

# Auth
JWT_SECRET=
JWT_ACCESS_EXPIRATION=15m
JWT_REFRESH_EXPIRATION=7d
NONCE_EXPIRATION=300

# Wallet signature challenges (issue #118)
# Optional: exact host embedded in the challenge envelope's `domain` field
# (defaults to the host of API_URL).
AUTH_CHALLENGE_DOMAIN=
# Legacy raw-nonce signatures (no domain binding) are deprecated. Keep true
# during the migration window; set false to disable immediately. Note the
# scheme is ALSO hard-disabled at runtime once AUTH_LEGACY_SIGNATURES_SUNSET
# (below) has passed, so the flag does not need a manual flip at sunset.
AUTH_ALLOW_LEGACY_RAW_SIGNATURES=true
# Hard cutoff (YYYY-MM-DD) for the legacy raw-nonce scheme. After this date
# legacy signatures are rejected even while AUTH_ALLOW_LEGACY_RAW_SIGNATURES
# is true. Override to close the window early or extend it in an emergency.
AUTH_LEGACY_SIGNATURES_SUNSET=2026-10-31

# Redis
REDIS_URL=redis://localhost:6379
REDIS_DB=0
REPUTATION_CACHE_TTL=300

# Logging
LOG_LEVEL=debug
LOG_PRETTY=true

# CORS
CORS_ORIGINS=http://localhost:3000,http://localhost:5173
CORS_CREDENTIALS=true

# Jobs
JOBS_ENABLED=true
INDEXER_INTERVAL=30
TX_STATUS_INTERVAL=15
REMINDER_CRON=0 9 * * *

# Admin — comma-separated Stellar addresses allowed to access admin endpoints.
# An empty value denies ALL admin access by design (do not leave blank in production).
ADMIN_WALLETS=

# Sentry
SENTRY_DSN=
SENTRY_TRACES_SAMPLE_RATE=0.1