GoodWallet/.env.example at main · GoodDollar/GoodWallet · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
# =============================================================================
# GoodWallet V2 — environment template
# -----------------------------------------------------------------------------
# Copy this file to `.env.development` or `.env.production` and fill in real
# values for your environment. NEVER commit those files: they are gitignored.
#
# Variables prefixed with NEXT_PUBLIC_ are inlined into the client bundle by
# Next.js and are therefore visible to anyone who loads the app. Treat them as
# public configuration, not secrets. Everything else is server-only.
# =============================================================================

# --- Web3Auth / Torus (PUBLIC, client-side) -----------------------------------
# "mainnet" | "testnet"
NEXT_PUBLIC_WEB3AUTH_NETWORK=mainnet
NEXT_PUBLIC_WEB3AUTH_CLIENTID=
NEXT_PUBLIC_WEB3AUTH_COREKIT_ENABLED=false

NEXT_PUBLIC_WEB3AUTH_GOOGLE_CLIENTID=
NEXT_PUBLIC_WEB3AUTH_GOOGLE_VERIFIER=
NEXT_PUBLIC_WEB3AUTH_GOOGLE_SUBVERIFIER=

NEXT_PUBLIC_WEB3AUTH_FACEBOOK_CLIENTID=
NEXT_PUBLIC_WEB3AUTH_FACEBOOK_VERIFIER=

NEXT_PUBLIC_WEB3AUTH_AUTH0_CAPTCHA_KEY=
NEXT_PUBLIC_WEB3AUTH_AUTH0_CLIENTID=
NEXT_PUBLIC_WEB3AUTH_AUTH0_VERIFIER=
NEXT_PUBLIC_WEB3AUTH_AUTH0_DOMAIN=

# --- RPC URLs (PUBLIC, client-side) ------------------------------------------
# Any provider-specific API keys placed in these URLs are exposed in the
# client bundle. Use rate-limited or domain-restricted keys here.
# Alchemy keys are assumed for the missing URLs. Please adjust config.ts#alchemyConfig according to the entered RPCs
NEXT_PUBLIC_ETHEREUM_RPC_URL=
NEXT_PUBLIC_FUSE_RPC_URL=https://rpc.fuse.io
NEXT_PUBLIC_CELO_RPC_URL=
NEXT_PUBLIC_SEPOLIA_RPC_URL=
NEXT_PUBLIC_HOODI_RPC_URL=
NEXT_PUBLIC_POLYGON_RPC_URL=
NEXT_PUBLIC_OPTIMISM_RPC_URL=
NEXT_PUBLIC_BNB_RPC_URL=
NEXT_PUBLIC_BASE_RPC_URL=
NEXT_PUBLIC_SOLANA_RPC_URL=mainnet
NEXT_PUBLIC_SOLANA_DEVNET_RPC_URL=devnet
NEXT_PUBLIC_XDC_RPC_URL=https://xdc.public-rpc.com
NEXT_PUBLIC_XRP_RPC_URL=
NEXT_PUBLIC_XRP_TESTNET_RPC_URL=

# XDC does not support EIP-1559; gas price override in wei.
NEXT_PUBLIC_XDC_GAS_PRICE_WEI=12500000000

# Default chain used for invite codes (50 = XDC).
NEXT_PUBLIC_PRIMARY_INVITE_CHAIN_ID=50

# Include testnet tokens in the UI (typically true in dev, false in prod).
NEXT_PUBLIC_INCLUDE_TESTNET_TOKENS=true

# --- GoodDollar --------------------------------------------------------------
# "development" | "production"
NEXT_PUBLIC_GOODDOLLAR_CONTRACTS=development
NEXT_PUBLIC_USE_RESERVE_PRICE=false
NEXT_PUBLIC_GOODDOLLAR_FEED_TAG=publishWalletV2
NEXT_PUBLIC_GOODDOLLAR_FEED_CTX=
NEXT_PUBLIC_GOODDOLLAR_FEED_URL=https://feed-dev.gooddollar.org/api/ceramic-feed/posts/

# --- Auth / login toggles ----------------------------------------------------
NEXT_PUBLIC_LOGIN_PWLESS_ENABLED=true
NEXT_PUBLIC_LOGIN_GOOGLE_ENABLED=true
NEXT_PUBLIC_LOGIN_FACEBOOK_ENABLED=false

# Test login (dev only — never enable in production).
NEXT_PUBLIC_TEST_LOGIN_ENABLED=false
NEXT_PUBLIC_TEST_LOGIN_MASTER_SEED=
NEXT_PUBLIC_TEST_LOGIN_USER_NAME=
NEXT_PUBLIC_TEST_LOGIN_PROFILE_IMAGE=

# --- WalletConnect (PUBLIC) ---------------------------------------------------
NEXT_PUBLIC_WALLET_CONNECT_PROJECT_ID=

# --- Monitoring & analytics (PUBLIC) -----------------------------------------
NEXT_PUBLIC_SENTRY_DSN=
NEXT_PUBLIC_SENTRY_DEBUG=false
NEXT_PUBLIC_SENTRY_TRACES_SAMPLE_RATE=0.1
NEXT_PUBLIC_SENTRY_REPLAY_SESSION_SAMPLE_RATE=0.0
NEXT_PUBLIC_SENTRY_REPLAY_ON_ERROR_SAMPLE_RATE=0.1
NEXT_PUBLIC_AMPLITUDE_API_KEY=

# =============================================================================
# SERVER-ONLY SECRETS — never expose to the client, never commit real values
# =============================================================================

# Alchemy multi-chain API key (used by server-side routes).
ALCHEMY_SERVER_API_KEY=

# Tatum API keys (used by server-side chain routes).
TATUM_MAINNET_API_KEY=
TATUM_TESTNET_API_KEY=

# XDC explorer (BlocksScan / Ledger) API keys for transaction history.
LEDGER_XDC_KEY1=
LEDGER_XDC_KEY2=
LEDGER_XDC_KEY3=

# Polymarket builder credentials (used by /api/polymarket/sign).
POLYMARKET_BUILDER_API_KEY=
POLYMARKET_BUILDER_SECRET=
POLYMARKET_BUILDER_PASSPHRASE=

# Tokens database. Local development can use pglite; production uses Postgres.
POSTGRES_TOKENS_DATABASE_URL=pglite://./data/local.db

# Server-to-server API key for the airdrop registration endpoint.
AIRDROP_API_KEY=

# AI Credits widget backend (PUBLIC — inlined into the client bundle).
NEXT_PUBLIC_AI_CREDITS_BACKEND_URL=
NEXT_PUBLIC_AI_CREDITS_FUNDING_VAULT_ADDRESS=
# Hide the dashboard button while keeping /{locale}/ai-credits accessible.
NEXT_PUBLIC_AI_CREDITS_WIDGET_DASHBOARD_ENABLED=false

# Hide the dashboard button while keeping /{locale}/superfluid-campaign accessible.
NEXT_PUBLIC_SUPERFLUID_CAMPAIGN_WIDGET_DASHBOARD_ENABLED=false