.env.example

# TricklePay backend configuration.
#
# Copy this file to `.env` and fill in the two required values. Every other
# setting is optional and shown here with its default; uncommented optional
# values match what the service uses when they are left unset.

# ---------------------------------------------------------------------------
# Required — the service refuses to start without these.
# ---------------------------------------------------------------------------

# Postgres connection string.
DATABASE_URL=postgresql://tricklepay:tricklepay@localhost:5432/tricklepay

# Deployed stream contract id to index: a Soroban contract address (StrKey,
# 56 characters, starts with "C"). No default.
STREAM_CONTRACT_ID=

# ---------------------------------------------------------------------------
# Optional — network and RPC.
# ---------------------------------------------------------------------------

# Stellar network to talk to: testnet or mainnet. Default: testnet.
NETWORK=testnet

# Soroban RPC endpoint. Defaults to the public endpoint for NETWORK:
#   testnet -> https://soroban-testnet.stellar.org
#   mainnet -> https://mainnet.sorobanrpc.com
# Plain http:// is only accepted for localhost / 127.x.x.x endpoints.
#SOROBAN_RPC_URL=https://soroban-testnet.stellar.org

# ---------------------------------------------------------------------------
# Optional — HTTP server.
# ---------------------------------------------------------------------------

# Listen port and bind address. Defaults: PORT=3000, HOST=0.0.0.0.
PORT=3000
HOST=0.0.0.0

# Allowed browser origin for the web client. Unset reflects any origin, which
# suits local dev; pin this to the frontend's URL in a deployment.
CORS_ORIGIN=

# Log verbosity: trace, debug, info, warn, error, or fatal. Default: info.
LOG_LEVEL=info

# Largest accepted request body in bytes. Default: 1048576 (1 MiB).
BODY_LIMIT=1048576

# Longest accepted URL query string, in bytes. Default: 2048 (2 KiB).
QUERY_STRING_LIMIT=2048

# Comma-separated list of trusted reverse-proxy addresses (IPs or IPv4 CIDR
# blocks), e.g. "10.0.0.5,10.0.1.0/24". Forwarded headers (X-Forwarded-For,
# X-Forwarded-Proto) are honored only when the direct connection peer is in
# this list; leave unset for direct exposure so clients cannot spoof the
# recorded client address (#75).
TRUSTED_PROXIES=

# ---------------------------------------------------------------------------
# Optional — indexer tuning.
# ---------------------------------------------------------------------------

# Milliseconds between polls of the chain once caught up. Minimum 1000;
# smaller values are rejected so the indexer cannot hammer the RPC.
INDEXER_POLL_INTERVAL_MS=5000

# Maximum poll retry delay (ms) when the RPC keeps failing. After a failure the
# wait doubles (2×, 4×, 8× …) up to this ceiling, then resets to the normal
# interval after a successful poll. Prevents hammering an unavailable RPC.
INDEXER_BACKOFF_MAX_MS=60000

# Ledger to begin indexing from for a backfill. 0 (or unset) starts from the
# chain's latest ledger at startup instead of replaying history.
INDEXER_START_LEDGER=0

# Maximum number of event pages fetched per poll tick. A large backlog is split
# across ticks so a single poll cannot run indefinitely; the cursor is persisted
# after every page, so the next tick resumes where it stopped. Default: 1000.
INDEXER_MAX_PAGES_PER_TICK=1000