Backend/.env.development at main · Neurowealth/Backend · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
```env
# ============================================================
# Application Configuration
# ============================================================

# Runtime environment.
# "development" enables development-specific behavior and settings.
NODE_ENV=development

# Port on which the backend API runs.
PORT=3000


# ============================================================
# CORS Configuration
# ============================================================

# Comma-separated list of frontend origins allowed to access
# the backend API during local development. NODE_ENV=development
# permits any origin, so this list is documentation only.
CORS_ORIGINS=http://localhost:3000,http://localhost:3001,http://localhost:5173

# Whether to reject requests that carry no Origin header. Non-browser
# clients (curl, server-to-server) send none. Defaults to false in
# development, true in production.
# CORS_REQUIRE_ORIGIN=false


# ============================================================
# Database Configuration
# ============================================================

# PostgreSQL connection string for the development database.
DATABASE_URL=postgresql://user:password@localhost:5432/neuro_backend_dev

# PostgreSQL database host.
DB_HOST=localhost

# PostgreSQL database port.
DB_PORT=5432

# PostgreSQL database username.
DB_USER=user

# PostgreSQL database password.
# Use a local development password only.
DB_PASSWORD=password

# Name of the development PostgreSQL database.
DB_NAME=neuro_backend_dev


# ============================================================
# Authentication / JWT Configuration
# ============================================================

# Secret used to sign and verify JWT access tokens.
# Use a strong secret even in development.
JWT_SECRET=dev-jwt-secret-key

# Lifetime of JWT access tokens.
JWT_EXPIRY=24h

# Separate secret used to sign and verify refresh tokens.
REFRESH_TOKEN_SECRET=dev-refresh-secret


# ============================================================
# AI / External API Configuration
# ============================================================

# Anthropic API key used by the application for AI functionality.
# Replace the development placeholder with a valid API key when needed.
ANTHROPIC_API_KEY=sk-dev-anthropic-key

# OpenAI API key used by the application for OpenAI functionality.
# Replace the development placeholder with a valid API key when needed.
OPENAI_API_KEY=sk-dev-openai-key

# Brian API key for Brian-related integrations.
# Add a valid development key if the integration is enabled.
# BRIAN_API_KEY=get_from_brianknows.org


# ============================================================
# Logging Configuration
# ============================================================

# Log level for development.
# "debug" provides detailed information useful during development.
LOG_LEVEL=debug

# Output logs as structured JSON.
LOG_FORMAT=json


# ============================================================
# HTTP / Server Configuration
# ============================================================

# Maximum amount of time the server waits for an HTTP request
# before timing out, in milliseconds.
SERVER_TIMEOUT=30000

# Maximum size allowed for incoming HTTP request bodies.
MAX_REQUEST_SIZE=10mb

# ============================================================
# Core Startup Keys (#497 environment parity)
# ============================================================
# Required by src/config/env.ts at boot — `npm run env:parity`
# fails CI when any of these goes missing from an environment.

STELLAR_NETWORK=testnet
STELLAR_AGENT_SECRET_KEY=your_agent_stellar_secret_key_here
VAULT_CONTRACT_ID=your_deployed_contract_id_here
USDC_TOKEN_ADDRESS=testnet_usdc_contract_address_here
WALLET_ENCRYPTION_KEY=generate_with_openssl_rand_hex_32

# Shared infrastructure and tuning keys documented in .env.example
REDIS_URL=redis://localhost:6379
BRIAN_API_KEY=get_from_brianknows.org
RETENTION_USER_EVENTS_DAYS=7
USER_EVENT_STREAM_MAX_PER_USER=5000

# WebSocket streaming (mirrors .env.example defaults)
WS_PATH=/api/v1/ws
WS_HEARTBEAT_INTERVAL_MS=30000
WS_IDLE_TIMEOUT_MS=90000
WS_MAX_BUFFERED_EVENTS=256
WS_MAX_BUFFERED_BYTES=1048576
WS_MAX_CONNECTIONS_PER_USER=5
WS_HANDSHAKE_MAX=30
WS_HANDSHAKE_WINDOW_MS=60000
WS_MESSAGE_MAX=50
WS_MESSAGE_WINDOW_MS=10000
WS_MAX_MESSAGE_BYTES=4096
WS_REPLAY_MAX_EVENTS=1000
WS_SESSION_RECHECK_MS=60000
WS_COALESCE_WINDOW_MS=250
WS_DRAIN_RETRY_AFTER_MS=2000
WS_EVENT_CHANNEL=neurowealth:user-events
JWT_SEED=generate_with_openssl_rand_base64_48
TWILIO_AUTH_TOKEN=your_twilio_auth_token_here
```