.env.example

# ---------------------------------------------------------------------------
# MergeFi Backend — Environment Configuration
# Copy this file to `.env` and fill in real values for local development.
# ---------------------------------------------------------------------------

# --- App ---------------------------------------------------------------
NODE_ENV=development
PORT=3000
# Public URL of this API, used to build OAuth callback / webhook URLs
APP_URL=http://localhost:3000
# Frontend URL, used for CORS + OAuth redirect back to the SPA
FRONTEND_URL=http://localhost:3001

# --- Database (PostgreSQL via TypeORM) ----------------------------------
DATABASE_URL=postgresql://postgres:postgres@localhost:5432/mergefi
# Set to true only for local bootstrapping; use migrations in production
DATABASE_SYNCHRONIZE=false
DATABASE_LOGGING=false

# --- Auth / JWT ----------------------------------------------------------
JWT_SECRET=change-me-to-a-long-random-string
JWT_EXPIRES_IN=7d

# --- GitHub OAuth (login) -------------------------------------------------
# Create an OAuth App at https://github.com/settings/developers
GITHUB_CLIENT_ID=
GITHUB_CLIENT_SECRET=
GITHUB_OAUTH_CALLBACK_URL=http://localhost:3000/api/auth/github/callback

# --- GitHub App / REST sync (Octokit) -------------------------------------
# Personal access token or GitHub App installation token used for repo sync.
# TODO: migrate to a GitHub App installation token flow for multi-org support.
GITHUB_API_TOKEN=

# --- GitHub Webhooks -------------------------------------------------------
# Secret configured on the GitHub repo/organization webhook. Used to verify
# the `X-Hub-Signature-256` HMAC-SHA256 header on every incoming webhook.
GITHUB_WEBHOOK_SECRET=change-me-webhook-secret

# --- Stellar / Soroban -----------------------------------------------------
# "testnet" | "futurenet" | "mainnet"
STELLAR_NETWORK=testnet
HORIZON_URL=https://horizon-testnet.stellar.org
SOROBAN_RPC_URL=https://soroban-testnet.stellar.org
# Network passphrase must match STELLAR_NETWORK; testnet default shown.
STELLAR_NETWORK_PASSPHRASE=Test SDF Network ; September 2015

# mergefi-contracts is deployed to Stellar testnet; see that repo's README
# for the current contract IDs. Leave blank to run escrow calls in "dry
# run" mode (persisted locally, no on-chain effect) instead.
ESCROW_CONTRACT_ID=
# Contract ID for the recurring maintenance pool contract. Falls back to
# ESCROW_CONTRACT_ID if unset.
MAINTENANCE_POOL_CONTRACT_ID=

# Treasury / platform account that pays transaction fees and can act as a
# fallback signer for automated (non-custodial) release/refund operations.
# TODO: replace with a proper signing service (KMS / multi-sig) before
# handling real funds.
TREASURY_ADDRESS=
TREASURY_SECRET=

# Asset issuers for supported stablecoins on Stellar (Circle USDC on testnet
# has a well-known issuer; mainnet issuer differs).
USDC_ASSET_CODE=USDC
USDC_ASSET_ISSUER=

# --- Misc --------------------------------------------------------------
LOG_LEVEL=debug