.env.example

# ==============================================================================
# Stellarlend Environment Configuration Example
# Copy this file to .env.local and populate with your values.
# ==============================================================================

# ------------------------------------------------------------------------------
# PUBLIC CONFIGURATION (Safe for Client/Browser Bundle)
# Must be prefixed with NEXT_PUBLIC_
# ------------------------------------------------------------------------------

# Application Info
NEXT_PUBLIC_APP_NAME=Stellarlend
NEXT_PUBLIC_APP_VERSION=1.0.0
NEXT_PUBLIC_APP_ENV=development

# API Settings
NEXT_PUBLIC_API_BASE_URL=http://localhost:3001

# Stellar Network Node Endpoints
NEXT_PUBLIC_STELLAR_NETWORK=testnet
NEXT_PUBLIC_STELLAR_HORIZON_URL=https://horizon-testnet.stellar.org
STELLAR_HORIZON_URLS=https://horizon-testnet.stellar.org,https://horizon-backup.stellar.org
NEXT_PUBLIC_SOROBAN_RPC_URL=https://soroban-testnet.stellar.org

# Analytics Integrations
NEXT_PUBLIC_GA_TRACKING_ID=UA-XXXXXXX-Y
NEXT_PUBLIC_MIXPANEL_TOKEN=mixpanel-token-placeholder

# ------------------------------------------------------------------------------
# SERVER-ONLY SECRETS (NEVER expose to Client/Browser Bundle)
# Keep these secure and do NOT prefix with NEXT_PUBLIC_
# ------------------------------------------------------------------------------

# Price Oracle API Key
# Used by the server-side price proxy API route (/api/prices)
# For development, you can use a dummy value as the implementation uses mock data
# In production, obtain from your price oracle provider (e.g., CoinGecko, Chainlink)
PRICE_ORACLE_API_KEY=your-oracle-secret-api-key

# Auth JWT/Cookie Signing Secret
AUTH_SIGNING_SECRET=your-auth-signing-secret-key-32-chars-long

# Server API Auth Token
SERVER_TOKEN=your-internal-server-auth-token

# Soroban RPC Endpoint
# Server-only to force wallet traffic through the relay routes.
SOROBAN_RPC_URL=https://soroban-testnet.stellar.org

# Default per-transaction fee (in stroops) for Soroban transaction builds.
# Server-only to keep wallet submissions server-relayed. Increase during
# network congestion to avoid fee-too-low / tx_bad_seq failures.
SOROBAN_TRANSACTION_FEE=100

# Transaction rate limiting
API_RATE_LIMIT_MAX=100
API_RATE_LIMIT_WINDOW_MS=60000
RATE_LIMIT_MAX=100
RATE_LIMIT_WINDOW=60000
TX_ACCOUNT_RATE_LIMIT_MAX=30
TX_ACCOUNT_RATE_LIMIT_WINDOW_MS=60000
TX_ACCOUNT_RATE_LIMIT_BURST=60

# Public auth/session display settings
NEXT_PUBLIC_SESSION_COOKIE=session
NEXT_PUBLIC_APP_DOMAIN=localhost:3000
NEXT_PUBLIC_SOROBAN_CONTRACT_ID=GXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

# Webhook HMAC signing secret
WEBHOOK_SECRET=replace-with-webhook-hmac-secret

# Session/JWT signing configuration
AUTH_SECRET=replace-with-auth-secret
AUTH_SESSION_EXPIRY=24
JWT_SECRET=replace-with-jwt-secret

# Stellar server-side signing configuration
STELLAR_SIGNING_SECRET=replace-with-stellar-signing-secret

# Database and cache configuration
DATABASE_URL=postgres://postgres:postgres@localhost:5432/stellarlend
# Set to "true" ONLY to disable TLS cert verification (insecure, production opt-in with explicit sign-off)
DATABASE_SSL_INSECURE=false
# PEM CA certificate for private-CA TLS verification (leave blank to use system CAs)
DATABASE_CA_CERT=
REDIS_URL=redis://localhost:6379
REDIS_HOST=localhost
REDIS_PORT=6379

# Security and session cookies
CSRF_COOKIE_NAME=csrf-token

# Background jobs and retention
RETENTION_DRY_RUN=true
AUDIT_RETENTION_DAYS=30
SESSION_RETENTION_DAYS=30
SNAPSHOT_RETENTION_DAYS=30

# Circuit breaker and chaos testing
CIRCUIT_FAILURE_RATE=0.5
CIRCUIT_MIN_CALLS=20
CIRCUIT_COOLDOWN_MS=60000
ENABLE_CHAOS_INJECTION=false

# Optional telemetry and indexing
SENTRY_RELEASE=local-dev
STELLAR_INDEXER_ACCOUNT=
MEMO_SALT=stellarlend-default-salt
STRICT_MEMO_MODE=false
SERVER_LOG_LEVEL=info