stellar-creator-portfolio/.env.example at main · Paranoa-dev/stellar-creator-portfolio · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
# Database Configuration
NEXT_PUBLIC_SUPABASE_URL=your_supabase_url_here
NEXT_PUBLIC_SUPABASE_ANON_KEY=your_supabase_anon_key_here
SUPABASE_SERVICE_ROLE_KEY=your_service_role_key_here

# Authentication
NEXTAUTH_SECRET=your_nextauth_secret_here
NEXTAUTH_URL=http://localhost:3000

# API Configuration
NEXT_PUBLIC_API_URL=http://localhost:3000/api
# Database
DATABASE_URL="postgresql://postgres:postgres@localhost:5432/stellar_portfolio?schema=public"

# Auth
NEXTAUTH_SECRET="your-nextauth-secret"
NEXTAUTH_URL="http://localhost:3000"

# AWS S3 (Optional)
AWS_ACCESS_KEY_ID="your-aws-access-key-id"
AWS_SECRET_ACCESS_KEY="your-aws-secret-access-key"
AWS_REGION="us-east-1"
AWS_S3_BUCKET="your-s3-bucket-name"

# Stripe
STRIPE_SECRET_KEY="sk_test_..."
STRIPE_WEBHOOK_SECRET="whsec_..."
NEXT_PUBLIC_STRIPE_PUBLISHABLE_KEY="pk_test_..."

# Stellar Network Configuration (#521)
# Set to "mainnet" for production, "testnet" for staging (default: testnet)
NEXT_PUBLIC_STELLAR_NETWORK=testnet

# Testnet RPC (used when NEXT_PUBLIC_STELLAR_NETWORK=testnet)
NEXT_PUBLIC_TESTNET_RPC_URL=https://soroban-testnet.stellar.org
NEXT_PUBLIC_TESTNET_RPC_URL_2=https://testnet.stellar.validationcloud.io/v1/soroban/rpc
NEXT_PUBLIC_TESTNET_PASSPHRASE="Test SDF Network ; September 2015"

# Mainnet RPC pool — primary + fallbacks (rpc-fallback.ts rotates on failure)
NEXT_PUBLIC_MAINNET_RPC_URL=https://soroban-mainnet.stellar.org
NEXT_PUBLIC_MAINNET_RPC_URL_2=https://mainnet.stellar.validationcloud.io/v1/soroban/rpc
NEXT_PUBLIC_MAINNET_RPC_URL_3=https://rpc.ankr.com/stellar_soroban
NEXT_PUBLIC_MAINNET_PASSPHRASE="Public Global Stellar Network ; September 2015"

CONTRACT_ID=
# STELLAR_ADMIN_SECRET is only read from env when KMS_PROVIDER=env (local/CI).
# In production it is fetched from AWS Secrets Manager; leave blank here.
STELLAR_ADMIN_SECRET=

# ---------------------------------------------------------------------------
# Key Management (KMS)
# ---------------------------------------------------------------------------
# KMS_PROVIDER=env   → read secrets from environment variables (default, local/CI)
# KMS_PROVIDER=aws   → fetch secrets from AWS Secrets Manager via CMK
KMS_PROVIDER=env

# Prefix for Secrets Manager secret IDs when KMS_PROVIDER=aws.
# Must match the SecretPrefix parameter in infrastructure/aws/kms.yaml.
KMS_SECRET_PREFIX=stellar/prod

# AWS region for Secrets Manager (required when KMS_PROVIDER=aws).
# AWS_REGION is also used by the S3 integration above.
# AWS_REGION=us-east-1

# Encryption
# IMPORTANT: Must be a valid 32-byte (64-character) hex string. Never use all zeros.
# Generate with: openssl rand -hex 32
ENCRYPTION_KEY="a1b2c3d4e5f6a7b8c9d0e1f2a3b4c5d6e7f8a9b0c1d2e3f4a5b6c7d8e9f0a1"

# Error Tracking & Monitoring
NEXT_PUBLIC_SENTRY_DSN="https://your-sentry-dsn@sentry.io/project-id"
SENTRY_AUTH_TOKEN="your-sentry-auth-token"
SENTRY_ENVIRONMENT="development"
SENTRY_RELEASE="1.0.0"
ENABLE_ERROR_TRACKING=true