Stellar-Spend/.env.example at main · Lex-Studios/Stellar-Spend · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
# Copy this file to .env.local before running the app:
#   cp .env.example .env.local
#
# Server-only secrets must NEVER use the NEXT_PUBLIC_ prefix.
# In particular:
# - PAYCREST_API_KEY must stay server-side
# - BASE_PRIVATE_KEY must stay server-side

# Paycrest secret API key used by server routes to create quotes and payout orders.
# Get it from the Paycrest dashboard or API credentials page.
PAYCREST_API_KEY=your_paycrest_api_key_here

# Paycrest webhook signing secret used to verify incoming webhook events.
# Generate or copy this from the Paycrest webhook settings page.
PAYCREST_WEBHOOK_SECRET=your_paycrest_webhook_secret_here

# Private key for the Base wallet that signs payout transactions.
# Get this from the dedicated wallet/account you control for this app.
# NEVER expose this in the browser or prefix it with NEXT_PUBLIC_.
BASE_PRIVATE_KEY=0xyour_base_private_key_here

# Public Base wallet address where unused or returned funds should be sent.
# Use the public address that corresponds to your payout wallet or treasury wallet.
BASE_RETURN_ADDRESS=0xyour_base_return_address_here

# Base mainnet RPC endpoint used by the server for on-chain payout execution.
# Use your RPC provider URL from Base, Alchemy, Infura, QuickNode, or another provider.
BASE_RPC_URL=https://mainnet.base.org

# Soroban RPC endpoint used by the server for Stellar transaction building and submission.
# Get this from your preferred Stellar RPC provider, or use a public mainnet endpoint.
STELLAR_SOROBAN_RPC_URL=https://soroban-rpc.mainnet.stellar.gateway.fm

# Horizon API endpoint used by the server for Stellar account and trustline lookups.
# Use the public Horizon mainnet endpoint or your managed Horizon provider URL.
STELLAR_HORIZON_URL=https://horizon.stellar.org

# Public Soroban RPC endpoint exposed to the browser for client-side Stellar interactions.
# This can match STELLAR_SOROBAN_RPC_URL if that endpoint is safe to expose publicly.
NEXT_PUBLIC_STELLAR_SOROBAN_RPC_URL=https://soroban-rpc.mainnet.stellar.gateway.fm

# Public Base return address shown to the browser when the client needs the destination address.
# This is safe to expose because it is a wallet address, not a private key.
NEXT_PUBLIC_BASE_RETURN_ADDRESS=0xyour_base_return_address_here

# Stellar issuer account for native Stellar USDC used to filter the correct Horizon trustline.
# Get the current mainnet issuer from official Circle or Stellar asset documentation.
NEXT_PUBLIC_STELLAR_USDC_ISSUER=your_stellar_usdc_issuer_here

# Sentry DSN for error monitoring. Get it from your Sentry project settings.
# The NEXT_PUBLIC_ variant is used by the browser SDK; the plain variant by the server SDK.
SENTRY_DSN=your_sentry_dsn_here
NEXT_PUBLIC_SENTRY_DSN=your_sentry_dsn_here

# Sentry org and project slugs used for source map uploads during CI builds.
SENTRY_ORG=your_sentry_org_slug
SENTRY_PROJECT=your_sentry_project_slug

# Sentry auth token used by the Sentry webpack plugin to upload source maps.
# Generate one at https://sentry.io/settings/account/api/auth-tokens/
SENTRY_AUTH_TOKEN=your_sentry_auth_token_here

# Set to "true" to generate a bundle analysis report during build.
ANALYZE=false

# Comma-separated list of origins allowed to call the API from a browser.
# In production, set this to your actual frontend origin(s), e.g.:
#   ALLOWED_ORIGINS=https://your-app.vercel.app,https://www.your-domain.com
# When left empty, localhost:3000/3001/3002 are allowed (development default).
ALLOWED_ORIGINS=