signet/.env.example at main · DevTobis/signet · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
# Signet environment template.
# Full reference (required/optional, consumers, defaults, degraded modes):
#   docs/ENVIRONMENT.md
#
# Copy to .env and fill values. Empty optional vars keep honest degraded modes.

# Database (optional for web demo routes; required for indexer)
DATABASE_URL="postgresql://signet:signet@localhost:5432/signet"

# Stellar (ops labels; indexer prefers INDEXER_* — see docs/ENVIRONMENT.md)
STELLAR_NETWORK=testnet
STELLAR_HORIZON_URL=https://horizon-testnet.stellar.org
SOROBAN_RPC_URL=https://soroban-testnet.stellar.org

# App
NEXT_PUBLIC_APP_URL=http://localhost:3000
NEXT_PUBLIC_ROOT_DOMAIN=signet.dev
SIGNET_AUTH_SECRET=
# Optional. Unix epoch milliseconds — sessions issued at or before this time are
# rejected. Bump to revoke every existing session after a secret rotation.
SIGNET_SESSIONS_VALID_AFTER=

# Optional. Set both to back rate limiting with Upstash Redis; with either unset
# the limiter stays in-memory and therefore per-instance. The same pair also
# backs the single-use sign-in nonce store, which matters more: on a
# multi-instance deploy without it, a replayed challenge routed to a different
# instance finds a clean slate.
UPSTASH_REDIS_REST_URL=
UPSTASH_REDIS_REST_TOKEN=

# Optional. Number of reverse proxies in front of the app, for rate-limit IP
# attribution. Leave at 0 on Vercel and Netlify — their edge sets a header we
# detect automatically. Set it only when running behind your own proxy, to the
# number of hops that append to X-Forwarded-For; a wrong (too high) value lets
# callers spoof their bucket, so under-count rather than over-count. At 0 with
# no platform header, all callers share one bucket.
SIGNET_TRUSTED_PROXY_HOPS=0

# Wallet + on-chain Identity Registry (client)
NEXT_PUBLIC_STELLAR_NETWORK=testnet
NEXT_PUBLIC_SOROBAN_RPC_URL=https://soroban-testnet.stellar.org
NEXT_PUBLIC_IDENTITY_REGISTRY_ID=

# Horizon endpoint for the web app's on-chain operations fetch
# (apps/web/lib/server/horizon.ts). HORIZON_URL is read first, then
# NEXT_PUBLIC_HORIZON_URL; both default to testnet. On mainnet set to
# https://horizon.stellar.org (mainnet has a public Horizon; Soroban RPC does not).
HORIZON_URL=https://horizon-testnet.stellar.org
NEXT_PUBLIC_HORIZON_URL=https://horizon-testnet.stellar.org

# --- Indexer worker (apps/indexer) — see docs/INDEXER.md ---
# The indexer reads its OWN endpoint vars, not STELLAR_HORIZON_URL / SOROBAN_RPC_URL.
INDEXER_NETWORK=testnet
INDEXER_HORIZON_URL=https://horizon-testnet.stellar.org
INDEXER_RPC_URL=https://soroban-testnet.stellar.org
# Sleep between ticks, in ms.
INDEXER_TICK_INTERVAL_MS=30000
# debug | info | warn | error
INDEXER_LOG_LEVEL=info

# Indexer attestation worker — reads claim/release events from the registry.
# Falls back to NEXT_PUBLIC_IDENTITY_REGISTRY_ID if unset. Leave empty and the
# worker no-ops (curated seed data stays the source of truth).
INDEXER_REGISTRY_CONTRACT_ID=
# 8000 ledgers (~11h) is a deliberate, empirically-verified margin below the
# public RPC's actual getEvents span limit (~10,700 ledgers / ~15h observed —
# see docs/INDEXER.md). A larger value doesn't error, it silently returns no
# events, so don't raise this against the public endpoint without re-verifying.
INDEXER_EVENT_WINDOW_LEDGERS=8000

# Server-side registry reads — the /handles directory (claim/release event
# stream), profile chain resolution, the dashboard's handle lookup, and the
# resolve/lookup/count view calls in lib/server/registry-read.ts. No database
# involved. Falls back to NEXT_PUBLIC_IDENTITY_REGISTRY_ID /
# NEXT_PUBLIC_SOROBAN_RPC_URL if unset; with neither set, reads return null/0
# rather than failing.
REGISTRY_CONTRACT_ID=
# Same public-RPC span limit as INDEXER_EVENT_WINDOW_LEDGERS above applies here.
REGISTRY_EVENT_WINDOW_LEDGERS=8000

# SEP-10 web authentication (server). Required in production — a Stellar
# secret key (S...) for the account that signs/verifies challenge
# transactions; also advertised (as its public key) via
# /.well-known/stellar.toml's SIGNING_KEY.
SEP10_SIGNING_SECRET=
# Only set this if the web_auth_domain is ever split from the home domain
# (e.g. auth served from a separate host than NEXT_PUBLIC_ROOT_DOMAIN). Leave
# unset for single-domain deployments — it defaults to NEXT_PUBLIC_ROOT_DOMAIN.
SEP10_WEB_AUTH_DOMAIN=