robosystems-app/.env.example at main · RoboFinSystems/robosystems-app · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
# =============================================================================
# ROBOSYSTEMS LOCAL DEVELOPMENT ENVIRONMENT
# =============================================================================
# This file contains the actual environment variables for local development.
# =============================================================================

# =============================================================================
# CORE APPLICATION CONFIGURATION
# =============================================================================
NODE_ENV=development
ENVIRONMENT=dev
NEXT_PUBLIC_APP_NAME=robosystems

# =============================================================================
# FRONTEND APPLICATION URLS
# =============================================================================
# These variables are used by the SSO system and API client

# RoboSystems API URL (used by API client throughout the app)
NEXT_PUBLIC_ROBOSYSTEMS_API_URL=http://localhost:8000

# App URLs for SSO cross-application navigation
NEXT_PUBLIC_ROBOSYSTEMS_APP_URL=http://localhost:3000
NEXT_PUBLIC_ROBOLEDGER_APP_URL=http://localhost:3001
NEXT_PUBLIC_ROBOINVESTOR_APP_URL=http://localhost:3002

# =============================================================================
# AWS S3 CONFIGURATION (LOCAL DEVELOPMENT ONLY)
# =============================================================================
# Override S3 endpoint for local development with LocalStack
# Leave empty or unset for production - will use real AWS S3
# Only set this in local development environment
NEXT_PUBLIC_S3_ENDPOINT_URL=http://localhost:4566

# =============================================================================
# FEATURE TOGGLES
# =============================================================================
# Maintenance mode toggle (used in landing page)
NEXT_PUBLIC_MAINTENANCE_MODE=false

# =============================================================================
# SECURITY - CLOUDFLARE TURNSTILE CAPTCHA
# =============================================================================
# Cloudflare Turnstile provides privacy-focused CAPTCHA for forms
# Prevents spam and automated attacks on registration, contact, and support forms
#
# For development:
# - Leave NEXT_PUBLIC_TURNSTILE_SITE_KEY empty to disable Turnstile
# - Or use Cloudflare's test keys:
#   - 1x00000000000000000000AA (always passes)
#   - 2x00000000000000000000AB (always fails)
#   - 3x00000000000000000000FF (always challenges)
#
# For production:
# 1. Go to https://dash.cloudflare.com/sign-up/turnstile
# 2. Create a new site widget
# 3. Add your production domain(s) to allowed domains
# 4. Copy the site key and secret key
#
# Site key (public, used in frontend)
NEXT_PUBLIC_TURNSTILE_SITE_KEY=1x00000000000000000000AA
# Secret key (private, used for server-side validation - if needed)
TURNSTILE_SECRET_KEY=
# Whether to require CAPTCHA (auto-disabled in dev if site key is empty)
REQUIRE_CAPTCHA=false

# =============================================================================
# PROXY CHAIN (rate limiting / client IP)
# =============================================================================
# FALLBACK ONLY. Behind CloudFront the client IP comes from the
# CloudFront-Viewer-Address header, which CloudFront sets and overwrites, so it
# cannot be forged and needs no hop counting. This setting applies only to
# requests that did NOT arrive through CloudFront, where the IP is read this
# many entries in from the RIGHT of X-Forwarded-For (everything further left is
# caller-supplied and therefore spoofable). Default 1.
# TRUSTED_PROXY_HOPS=1