.env.example

# Backend
PORT=4000
DATABASE_URL=postgresql://user:password@localhost:5432/stella_polymarket

# Stellar
STELLAR_NETWORK=testnet
STELLAR_RPC_URL=https://soroban-testnet.stellar.org
CONTRACT_ID=your_contract_id_here

# Oracle
API_URL=http://localhost:4000
SPORTS_API_KEY=your_api_football_key_here
FINANCIAL_API_KEY=your_key_here
SPORTS_API_URL=https://v3.football.api-sports.io

# Sports Oracle — Stellar on-chain resolution
# ORACLE_SECRET_KEY must NEVER be committed. Add to your secrets manager / CI env.
ORACLE_SECRET_KEY=your_stellar_oracle_secret_key_here
POLL_INTERVAL_MS=60000

# Firebase (Frontend)
NEXT_PUBLIC_FIREBASE_API_KEY=your_firebase_api_key
NEXT_PUBLIC_FIREBASE_AUTH_DOMAIN=your_project.firebaseapp.com
NEXT_PUBLIC_FIREBASE_PROJECT_ID=your_project_id
NEXT_PUBLIC_FIREBASE_STORAGE_BUCKET=your_project.appspot.com
NEXT_PUBLIC_FIREBASE_MESSAGING_SENDER_ID=your_messaging_sender_id
NEXT_PUBLIC_FIREBASE_APP_ID=your_firebase_app_id

# Firebase App Check
# reCAPTCHA Enterprise site key (from Google Cloud Console → reCAPTCHA Enterprise)
# Required in production. Leave empty to disable App Check (not recommended).
NEXT_PUBLIC_RECAPTCHA_ENTERPRISE_KEY=your_recaptcha_enterprise_site_key

# App Check debug token for local development ONLY.
# Generate one via: Firebase Console → App Check → Apps → your app → "..." → Manage debug tokens
# NEVER commit a real debug token. Add this file to .gitignore.
# Only active when NODE_ENV !== 'production'.
NEXT_PUBLIC_APPCHECK_DEBUG_TOKEN=your_debug_token_here

# Firebase Admin (Backend)
# Path to a service account JSON with "Firebase App Check Admin" role.
# In Cloud Run / Cloud Functions leave blank – ADC is used automatically.
GOOGLE_APPLICATION_CREDENTIALS=./service-account.json
FIREBASE_PROJECT_ID=your_project_id