zksettle/.env.example at main · Dnreikronos/zksettle · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
# ── Postgres (shared by gateway + indexer) ──────────────────
# Required: any non-empty string for local dev; rotate to a real secret in prod.
# Don't commit a real production password — keep prod values in your secret manager.
POSTGRES_USER=zksettle
POSTGRES_PASSWORD=zksettle_dev
POSTGRES_DB=zksettle_gateway

# ── API Gateway ──────────────────────────────────────────────
GATEWAY_DATABASE_URL=postgres://zksettle:zksettle_dev@localhost:5432/zksettle_gateway
GATEWAY_PORT=4000
GATEWAY_UPSTREAM_URL=http://localhost:3000
GATEWAY_INDEXER_URL=http://localhost:3001
GATEWAY_ADMIN_KEY=
GATEWAY_ALLOW_OPEN_KEYS=true
GATEWAY_CORS_ALLOWED_ORIGINS=http://localhost:3000
GATEWAY_LOG_LEVEL=info
# Signs SIWS session JWTs. Any random non-empty string for local dev; rotate
# to a 32+ byte cryptographically random secret in prod (e.g. `openssl rand -base64 48`).
GATEWAY_JWT_SECRET=
# Domain the gateway expects in the SIWS-signed message (must match the browser host).
# Local dev default is localhost:3000; in prod set to the deployed app domain.
GATEWAY_SIWS_DOMAIN=localhost:3000

# ── Indexer ──────────────────────────────────────────────────
INDEXER_PORT=3001
INDEXER_HELIUS_AUTH_TOKEN=
INDEXER_IRYS_NODE_URL=https://node2.irys.xyz
INDEXER_IRYS_WALLET_KEY=
INDEXER_PROGRAM_ID=
INDEXER_LOG_LEVEL=info
INDEXER_DEDUP_PATH=./data/dedup
INDEXER_DEDUP_CAPACITY=1000000
INDEXER_DEDUP_TTL_SECS=86400
INDEXER_DATABASE_URL=postgres://zksettle:zksettle_dev@localhost:5432/zksettle_gateway

# ── Issuer Service ───────────────────────────────────────────
RPC_URL=http://127.0.0.1:8899
KEYPAIR_PATH=~/.config/solana/id.json
# Alternative to KEYPAIR_PATH for cloud deployments (JSON byte array, e.g. [1,2,3,...]):
# ISSUER_KEYPAIR=
PROGRAM_ID=zkSet11ezkSet11ezkSet11ezkSet11ezkSet11ezkS
ROTATION_INTERVAL_SECS=43200
LISTEN_ADDR=127.0.0.1:3000
STATE_PATH=
API_TOKEN=
ALLOW_UNAUTHENTICATED=false
# Gateway → issuer shared bearer. MUST equal the issuer-service API_TOKEN above.
# Leave empty in loopback dev (issuer skips bearer check when API_TOKEN is unset).
GATEWAY_UPSTREAM_TOKEN=

# ── Testing ───────────────────────────────────────────────────
TEST_DATABASE_URL=postgres://zksettle:zksettle_dev@localhost:5432/zksettle_gateway_test
INDEXER_TEST_DATABASE_URL=postgres://zksettle:zksettle_dev@localhost:5432/zksettle_indexer_test

# ── Build ────────────────────────────────────────────────────
VK_PATH=default.vk