.env.example

# =============================================================================
# Commitlabs — Environment Variable Reference
# Copy this file to .env.local (git-ignored) and fill in your values.
# All validation is enforced by src/lib/backend/env.ts (Zod schema).
# =============================================================================

# -----------------------------------------------------------------------------
# Soroban RPC  (required in development / production)
# Use the private var for server-only routes; the NEXT_PUBLIC_ var is exposed
# to the browser. The private var takes precedence when both are set.
# Must be a valid URL when provided.
# -----------------------------------------------------------------------------
NEXT_PUBLIC_SOROBAN_RPC_URL=https://soroban-testnet.stellar.org:443
# SOROBAN_RPC_URL=https://soroban-testnet.stellar.org:443

# Stellar network passphrase (defaults to testnet value when not set)
NEXT_PUBLIC_NETWORK_PASSPHRASE=Test SDF Network ; September 2015
# SOROBAN_NETWORK_PASSPHRASE=Test SDF Network ; September 2015

# -----------------------------------------------------------------------------
# Contract addresses  (required in non-test environments)
# Provide either the private or the NEXT_PUBLIC_ variant.
# -----------------------------------------------------------------------------
NEXT_PUBLIC_COMMITMENT_NFT_CONTRACT=
NEXT_PUBLIC_COMMITMENT_CORE_CONTRACT=
NEXT_PUBLIC_ATTESTATION_ENGINE_CONTRACT=
# COMMITMENT_NFT_CONTRACT=
# COMMITMENT_CORE_CONTRACT=
# ATTESTATION_ENGINE_CONTRACT=

# Optional: select which configured version to use (defaults to "v1")
NEXT_PUBLIC_ACTIVE_CONTRACT_VERSION=v1

# Optional: JSON blob defining multiple contract versions.
# NEXT_PUBLIC_CONTRACTS_JSON={"v1":{"commitmentNFT":{"address":"C..."},"commitmentCore":{"address":"C..."}}}

# -----------------------------------------------------------------------------
# Signing credentials  (server-side only — NEVER expose to the browser)
# SOROBAN_SERVER_SECRET_KEY is used for on-chain write operations.
# Values are ALWAYS redacted from error messages and logs.
# -----------------------------------------------------------------------------
# SOROBAN_SERVER_SECRET_KEY=S...
# SOROBAN_SOURCE_ACCOUNT=G...

# Enable on-chain writes (set to "true" to activate; default false)
# COMMITLABS_ENABLE_CHAIN_WRITES=false

# -----------------------------------------------------------------------------
# Session secret  (REQUIRED in production)
# Used to sign session tokens. Generate with: openssl rand -hex 32
# Must be at least 32 characters. Value is ALWAYS redacted from error messages.
# -----------------------------------------------------------------------------
# SESSION_SECRET=<generate with: openssl rand -hex 32>

# -----------------------------------------------------------------------------
# Storage connection  (optional; required if blob/DB storage is used)
# Value is ALWAYS redacted from error messages.
# -----------------------------------------------------------------------------
# STORAGE_CONNECTION=

# -----------------------------------------------------------------------------
# RPC URL allowlist  (REQUIRED in production)
# Comma-separated list of permitted Soroban RPC endpoint URLs.
# The active SOROBAN_RPC_URL must be present in this list in production.
# Example:
# SOROBAN_RPC_URL_ALLOWLIST=https://soroban-testnet.stellar.org:443,https://rpc-mainnet.stellar.org
# -----------------------------------------------------------------------------
# SOROBAN_RPC_URL_ALLOWLIST=

# -----------------------------------------------------------------------------
# Feature flags  (all default to false)
# Individual boolean strings or a single JSON override blob (JSON takes precedence).
# -----------------------------------------------------------------------------
COMMITLABS_FEATURE_ANALYTICS_USER=false
COMMITLABS_FEATURE_MARKETPLACE=false
# COMMITLABS_FEATURE_FLAGS_JSON={"analyticsUser":false,"marketplace":false}

# Optional JSON override for feature flags (takes precedence). Example:
# COMMITLABS_FEATURE_FLAGS_JSON={"analyticsUser":true,"marketplace":false}

# ── Cache layer ────────────────────────────────────────────────────────────────
#
# CACHE_ADAPTER   Override adapter selection.
#                 "memory"  forces in-memory (default for dev/test).
#                 "redis"   forces Redis regardless of NODE_ENV.
#                 Omit to use the default: memory in dev/test, Redis in production
#                 when REDIS_URL is set.
# CACHE_ADAPTER=memory

# REDIS_URL       Standard Redis connection string used by RedisAdapter in production.
#                 Credentials embedded in the URL are parsed automatically by ioredis.
#                 Requires `npm install ioredis`.
#                 Examples:
#                   redis://localhost:6379
#                   redis://:mypassword@redis.example.com:6379/0
#                   rediss://:mypassword@redis.example.com:6380/0  (TLS)
# REDIS_URL=redis://localhost:6379