Atlanticfrewaycad/.env.example at main · Atlanticfreeways/Atlanticfrewaycad · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
# PostgreSQL Configuration
DATABASE_URL=postgresql://user:password@localhost:5432/atlanticfrewaycard
POSTGRES_HOST=localhost
POSTGRES_PORT=5432
POSTGRES_DB=atlanticfrewaycard
POSTGRES_USER=your_user
POSTGRES_PASSWORD=your_password
POSTGRES_POOL_SIZE=20

# Redis Configuration
REDIS_URL=redis://localhost:6379
REDIS_HOST=localhost
REDIS_PORT=6379
REDIS_PASSWORD=

# JWT Configuration (REQUIRED - Generate with: openssl rand -base64 32)
JWT_SECRET=your-super-secret-jwt-key-min-32-characters-long
JWT_REFRESH_SECRET=your-refresh-secret-key-min-32-characters
JWT_EXPIRY=15m
JWT_REFRESH_EXPIRY=7d

# Security
BCRYPT_ROUNDS=12
RATE_LIMIT_WINDOW=15m
RATE_LIMIT_MAX_REQUESTS=100

# Marqeta Configuration (Card Issuing)
MARQETA_BASE_URL=https://sandbox-api.marqeta.com/v3
MARQETA_APP_TOKEN=your-marqeta-app-token
MARQETA_ADMIN_TOKEN=your-marqeta-admin-token
MARQETA_WEBHOOK_SECRET=your-webhook-secret-here

# Payment Configuration (Paystack for Africa)
PAYSTACK_PUBLIC_KEY=pk_test_your_public_key
PAYSTACK_SECRET_KEY=sk_test_your_secret_key

# Crypto Services (NOWPayments)
NOWPAYMENTS_API_KEY=your-nowpayments-api-key
NOWPAYMENTS_IPN_SECRET=your-ipn-secret
NOWPAYMENTS_BASE_URL=https://api.nowpayments.io/v1

# Email Service
EMAIL_SERVICE=sendgrid
SENDGRID_API_KEY=your-sendgrid-api-key
FROM_EMAIL=noreply@atlanticfrewaycard.com

# Server Configuration
PORT=3000
NODE_ENV=development
API_BASE_URL=http://localhost:3000/api/v1
FRONTEND_URL=http://localhost:3001

# KYC Service (Choose: 'onfido' or 'stripe')
KYC_PROVIDER=stripe
# For Onfido:
ONFIDO_API_TOKEN=your-onfido-api-token
# For Stripe Identity:
STRIPE_SECRET_KEY=sk_test_your_stripe_secret_key
STRIPE_PUBLISHABLE_KEY=pk_test_your_stripe_publishable_key
STRIPE_WEBHOOK_SECRET=whsec_your_webhook_secret

# Security Configuration
ALLOWED_ORIGINS=http://localhost:3000,http://localhost:3001,http://localhost:5173
LOG_LEVEL=info

# AWS Secrets Manager (Optional - for production)
USE_AWS_SECRETS=false
AWS_REGION=us-east-1
AWS_SECRET_NAME=atlanticfrewaycard/production


Variable	Value (Example)
GOOGLE_CLIENT_ID	...apps.googleusercontent.com
GOOGLE_CLIENT_SECRET	GOCSPX-...
GITHUB_CLIENT_ID	Iv1...
GITHUB_CLIENT_SECRET	e9d...
SENDGRID_API_KEY	SG....
FROM_EMAIL	noreply@atlanticfreeways.com
SESSION_SECRET
(Any random long string)