BrandBlitz/.env.example at main · devonahi/BrandBlitz · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
# ──────────────────────────────────────────────────────────────────────────────
# BRANDBLITZ ENVIRONMENT VARIABLES
# ──────────────────────────────────────────────────────────────────────────────

# === Infrastructure ===
PORT=3001
NODE_ENV=development
DATABASE_URL=postgresql://brandblitz:brandblitz_dev@localhost:5432/brandblitz
REDIS_URL=redis://localhost:6379
POSTGRES_PASSWORD=brandblitz_dev

# === Auth & Frontend ===
# Minimum 32 characters for JWT security
JWT_SECRET=super-secret-random-string-at-least-32-chars
GOOGLE_CLIENT_ID=your-google-client-id
GOOGLE_CLIENT_SECRET=your-google-client-secret
WEB_URL=http://localhost:3000

# NextAuth configuration
NEXTAUTH_SECRET=same-as-jwt-secret-for-nextauth
NEXTAUTH_URL=http://localhost:3000
NEXT_PUBLIC_API_URL=http://localhost:3001/api
NEXTAUTH_API_URL=http://localhost:3001/api

# Comma-separated list of allowed origins for Next.js Server Actions
ALLOWED_ORIGINS=localhost:3000

# === Stellar Network ===
# 'testnet' or 'public'
STELLAR_NETWORK=testnet
STELLAR_HORIZON_URL=https://horizon-testnet.stellar.org
STELLAR_RPC_URL=https://soroban-testnet.stellar.org

# Hot wallet secret key (S...) used for payouts
STELLAR_HOT_WALLET_SECRET=SA...
# Hot wallet public key (G...) used for deposit detection
HOT_WALLET_PUBLIC_KEY=GA...

# Mainnet USDC: GA5ZSEJYB37JRC5AVCIA5MOP4RHTM335X2KGX3IHOJAPP5RE34K4KZVN
# Testnet USDC: GBBD47IF6LWK7P7MDEVSCWR7DPUWV3NY3DTQEVFL4NAT4AQH3ZLLFLA5
USDC_ISSUER=GBBD47IF6LWK7P7MDEVSCWR7DPUWV3NY3DTQEVFL4NAT4AQH3ZLLFLA5

# Shared secret for authenticating webhooks from the Stellar listener
# Generate with: openssl rand -hex 32
WEBHOOK_SECRET=your-webhook-secret

# === S3-Compatible Storage (MinIO/R2/AWS) ===
S3_ENDPOINT=http://localhost:9000
S3_REGION=us-east-1
S3_ACCESS_KEY_ID=minioadmin
S3_SECRET_ACCESS_KEY=minioadmin
S3_BUCKET=brandblitz-assets
S3_BUCKET_BRAND_ASSETS=brand-assets
S3_BUCKET_SHARE_CARDS=share-cards
S3_PUBLIC_URL=http://localhost:9000/brandblitz-assets

# Set to 'true' for MinIO local dev
S3_FORCE_PATH_STYLE=true

# MinIO Root Credentials (if using docker-compose)
MINIO_ROOT_USER=minioadmin
MINIO_ROOT_PASSWORD=minioadmin

# === Twilio (Phone Verification) ===
TWILIO_ACCOUNT_SID=ACxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
TWILIO_AUTH_TOKEN=your-twilio-auth-token
TWILIO_VERIFY_SERVICE_SID=VAxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
PHONE_HASH_SALT=replace_with_a_random_32_byte_secret

# === Session Integrity ===
# Used to HMAC-sign completed game sessions. Rotated independently from JWT_SECRET.
# Required in production; payout job verifies this before broadcasting Stellar transactions.
# Generate with: openssl rand -hex 32
SESSION_INTEGRITY_KEY=replace-with-at-least-32-random-chars-openssl-rand-hex-32

# === Logging ===
# error, warn, info, http, verbose, debug, silly
LOG_LEVEL=info