env.mainnet.example

# PromptHash Stellar Mainnet Configuration
# IMPORTANT: Copy this file to .env and fill in your actual values before deploying to mainnet
# DO NOT commit the actual .env file with real secrets

# Shared runtime
STELLAR_SCAFFOLD_ENV=production
XDG_CONFIG_HOME=.config

# Frontend runtime - Stellar Mainnet
PUBLIC_STELLAR_NETWORK=MAINNET
PUBLIC_STELLAR_NETWORK_PASSPHRASE="Public Global Stellar Network ; September 2015"
PUBLIC_STELLAR_RPC_URL=https://soroban-rpc.mainnet.stellar.org
PUBLIC_STELLAR_HORIZON_URL=https://horizon.stellar.org
# REPLACE WITH YOUR DEPLOYED CONTRACT ID
PUBLIC_PROMPT_HASH_CONTRACT_ID=YOUR_CONTRACT_ID_HERE
# Native asset contract ID on mainnet
PUBLIC_STELLAR_NATIVE_ASSET_CONTRACT_ID=CDLZFC3SYJYDZT7K67VZ75HPJVIEUVNIXF47ZG2FB2RMQQVU2HHGCYSC
# REPLACE WITH YOUR SIMULATION ACCOUNT
PUBLIC_STELLAR_SIMULATION_ACCOUNT=YOUR_SIMULATION_ACCOUNT_HERE
# REPLACE WITH YOUR ACTUAL PUBLIC KEY
PUBLIC_UNLOCK_PUBLIC_KEY=YOUR_PUBLIC_KEY_HERE

# Optional external chat gateway used by the current UI
PUBLIC_CHAT_API_BASE=https://secret-ai-gateway.onrender.com

# Optional — IPFS off-chain storage for large encrypted prompt payloads.
# When set, the browser uploads ciphertext to IPFS (Pinata) and stores only an
# ipfs://<cid> reference on-chain, letting prompts exceed the 4KB on-chain cap.
# Use an upload-scoped Pinata JWT (it is exposed to the browser).
# PUBLIC_PINATA_JWT=your_pinata_jwt_here

# Serverless unlock runtime
# REPLACE WITH SECURE RANDOM VALUES FOR PRODUCTION
CHALLENGE_TOKEN_SECRET=your_secure_challenge_token_secret_here
UNLOCK_PUBLIC_KEY=your_unlock_public_key_here
UNLOCK_PRIVATE_KEY=your_unlock_private_key_here

# Optional — unlock service rotation (see docs/secret-rotation.md)
# ADMIN_ROTATION_TOKEN=your_admin_rotation_token_here
# CHALLENGE_TOKEN_SECRET_PREVIOUS=previous_challenge_token_secret
# CHALLENGE_TOKEN_ROTATION_TIMESTAMP=timestamp_in_ms
# CHALLENGE_TOKEN_GRACE_PERIOD_MS=300000

# Optional — rate limiting (recommended for production)
# REDIS_URL=redis://your-redis-instance:6379

# Optional — IPFS gateway used by the unlock service to fetch off-chain
# ciphertext (defaults to https://gateway.pinata.cloud/ipfs/ when unset).
# PINATA_GATEWAY=https://gateway.pinata.cloud/ipfs/