.env.example

# Copy to `.env` and fill in. NEVER commit `.env`.

# --- Network ---
# Which Stellar network the server operates on: "testnet" or "mainnet".
NETWORK=testnet

# Horizon endpoint (testnet shown). Mainnet: https://horizon.stellar.org
HORIZON_URL=https://horizon-testnet.stellar.org

# Friendbot (testnet only) — funds new accounts.
FRIENDBOT_URL=https://friendbot.stellar.org

# --- Database ---
# Local dev via docker compose maps Postgres to host port 5433 (avoids a host Postgres on 5432).
DATABASE_URL=postgres://octo:octo@localhost:5433/octo

# --- Crypto ---
# 32-byte master key (base64) used to AES-256-GCM encrypt the HD seed at rest.
# Generate with: openssl rand -base64 32
# In production this comes from a KMS, not an env var.
MASTER_KEY=

# Optional: next master key for zero-downtime key rotation.
# Set this alongside MASTER_KEY during a rotation window while `octo-migrate-keys` is running.
# Once the migration tool reports 0 wallets remaining, set MASTER_KEY to this value and unset this.
# Generate with: openssl rand -base64 32
# MASTER_KEY_NEXT=

# Secret used to sign dashboard auth JWTs (HS256). At least 16 bytes.
# Generate with: openssl rand -hex 32
JWT_SECRET=

# --- Server ---
BIND_ADDR=0.0.0.0:8080
RUST_LOG=info,octo=debug

# --- Ingest worker ---
# How often the deposit ingest supervisor polls Horizon for all wallets, and the page size.
INGEST_INTERVAL_SECS=5
INGEST_PAGE_LIMIT=50