fluxapay/.env.example at main · MetroLogic/fluxapay · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
# FluxaPay Docker Compose Environment Variables
# Copy this file to .env before running docker-compose up

# ─── Database Configuration ────────────────────────────────────────────────
POSTGRES_USER=postgres
POSTGRES_PASSWORD=postgres
POSTGRES_DB=fluxapay_dev
DATABASE_URL="postgresql://postgres:postgres@postgres:5432/fluxapay_dev?schema=public"

# ─── Redis Configuration ───────────────────────────────────────────────────
REDIS_URL="redis://redis:6379"

# ─── Backend Server ────────────────────────────────────────────────────────
PORT=3001
NODE_ENV=development
BASE_URL=http://localhost:3001
CORS_ORIGINS=http://localhost:3000,http://localhost:3001

# ─── JWT Configuration ─────────────────────────────────────────────────────
JWT_SECRET="your-development-jwt-secret"
# Required — separate secret used only for admin-role tokens. No insecure
# fallback exists: the backend refuses to start without it.
ADMIN_JWT_SECRET="your-development-admin-jwt-secret"

# ─── Webhook Configuration ─────────────────────────────────────────────────
WEBHOOK_SECRET="your-development-webhook-secret"

# ─── Stellar Configuration ─────────────────────────────────────────────────
STELLAR_HORIZON_URL="https://horizon-testnet.stellar.org"
STELLAR_NETWORK_PASSPHRASE="Test SDF Network ; September 2015"
FUNDER_SECRET_KEY="your-funder-secret-key-here"
MASTER_VAULT_SECRET_KEY="your-master-vault-secret-key-here"
USDC_ISSUER_PUBLIC_KEY="GBBD47IF6LWK7P7MDEVSCWT73IQIGCEZHR7OMXMBZQ3ZONN2T4U6W23Y"
STELLAR_BASE_FEE="100"

# ─── HD Wallet & KMS ───────────────────────────────────────────────────────
KMS_PROVIDER="local"
KMS_ENCRYPTION_PASSPHRASE="your-strong-passphrase-here"

# ─── Features (Dev Defaults) ───────────────────────────────────────────────
DISABLE_CRON="true"
ENABLE_SOROBAN_VERIFICATION="false"
EXCHANGE_PARTNER="mock"
SMS_PROVIDER="none"

# ─── Frontend Configuration ────────────────────────────────────────────────
NEXT_PUBLIC_API_URL=http://localhost:3001

# ─── Admin Secrets (server-only, never exposed to client) ────────────────────
# These are used internally by server-side API routes only
ADMIN_SECRET="your-admin-secret-for-internal-endpoints"
ADMIN_API_KEY="your-admin-api-key-for-refund-operations"