forked from QuorumProof/QuorumProof
-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy path.env.example
More file actions
65 lines (55 loc) · 2.07 KB
/
Copy path.env.example
File metadata and controls
65 lines (55 loc) · 2.07 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
# Network configuration
STELLAR_NETWORK=testnet
STELLAR_RPC_URL=https://soroban-testnet.stellar.org
# Contract addresses (after deployment)
CONTRACT_QUORUM_PROOF=<your-contract-id>
CONTRACT_SBT_REGISTRY=<your-contract-id>
CONTRACT_ZK_VERIFIER=<your-contract-id>
# Rate limiting configuration
RATE_LIMIT_WINDOW_MS=60000
RATE_LIMIT_MAX=100
RATE_LIMIT_BACKOFF=2
RATE_LIMIT_MAX_VIOLATIONS=5
# Trusted client bypass (comma-separated IPs)
TRUSTED_IPS=
TRUSTED_HEADER_NAME=x-internal-request
TRUSTED_HEADER_VALUE=
# HMAC request signing
HMAC_SIGNING_SECRET=
# Issue #877: Share link password hashing secret
SHARE_LINK_HMAC_SECRET=change-me-in-production
# Issue #1000: externally-reachable origin used to build the verification
# URL embedded in credential export QR codes/PDFs (the API server doesn't
# otherwise know its own public origin behind a load balancer/proxy).
PUBLIC_APP_BASE_URL=http://localhost:3000
# Issue #880: Cross-chain bridge configuration
# Secret used to authenticate bridge relay proofs
BRIDGE_HMAC_SECRET=change-me-in-production
# Keccak256 topic hashes from your EVM credential contract (optional)
ETH_TOPIC_CREDENTIAL_ISSUED=
ETH_TOPIC_CREDENTIAL_REVOKED=
# Issue #1296: OAuth2 / OIDC provider credentials
OAUTH_GOOGLE_CLIENT_ID=
OAUTH_GOOGLE_CLIENT_SECRET=
OAUTH_GOOGLE_REDIRECT_URI=
OAUTH_MICROSOFT_CLIENT_ID=
OAUTH_MICROSOFT_CLIENT_SECRET=
OAUTH_MICROSOFT_REDIRECT_URI=
OAUTH_GITHUB_CLIENT_ID=
OAUTH_GITHUB_CLIENT_SECRET=
OAUTH_GITHUB_REDIRECT_URI=
# WebSocket cross-instance delivery (see docs/websocket-scaling.md)
# Required when running more than one api-server replica; unset falls back
# to same-process delivery only (fine for local dev, not for production).
REDIS_URL=
WS_INSTANCE_ID=
WS_SEND_QUEUE_MAX_MESSAGES=200
WS_SEND_QUEUE_MAX_BYTES=1000000
WS_BACKPRESSURE_HIGH_WATER_MARK=1000000
WS_DASHBOARD_BROADCAST_INTERVAL_MS=5000
# Frontend configuration
VITE_STELLAR_NETWORK=testnet
VITE_STELLAR_RPC_URL=https://soroban-testnet.stellar.org
VITE_CONTRACT_QUORUM_PROOF=<your-contract-id>
VITE_CONTRACT_SBT_REGISTRY=<your-contract-id>
VITE_CONTRACT_ZK_VERIFIER=<your-contract-id>