.env.example

# Never commit real secrets.
# Never use NEXT_PUBLIC_ for secret values.
# Production web variables belong in Vercel.
# Production API variables belong in the API host.
# CI secrets belong in GitHub Actions secrets.
# Hive private keys must never be collected, stored, transmitted, or logged.
# DATABASE_URL and DIRECT_URL are server-only. Never prefix them with NEXT_PUBLIC_.
# Store database passwords only in ignored local env files or deployment secret stores.
# Supabase service-role keys are not required for Prisma's PostgreSQL connection.

# Web
NEXT_PUBLIC_API_URL=http://localhost:3001
NEXT_PUBLIC_GOOGLE_AUTH_ENABLED=false

# API
NODE_ENV=development
HOST=0.0.0.0
PORT=3001
CORS_ORIGIN=http://localhost:3000
TRUST_PROXY=false

AUTH_JWT_SECRET=replace-with-a-long-random-secret
AUTH_REFRESH_SECRET=replace-with-a-different-long-random-secret
AUTH_JWT_ISSUER=hivelore
AUTH_JWT_AUDIENCE=hivelore-web
AUTH_ACCESS_TOKEN_TTL_SECONDS=900
AUTH_REFRESH_TOKEN_TTL_SECONDS=1209600
AUTH_CHALLENGE_TTL_SECONDS=300
AUTH_COOKIE_DOMAIN=
AUTH_COOKIE_SECURE=true
PROPOSAL_COMMENT_WRITE_RATE_LIMIT_CACHE=10000
PROPOSAL_COMMENT_WRITE_RATE_LIMIT_MAX=5
PROPOSAL_COMMENT_WRITE_RATE_LIMIT_WINDOW_SECONDS=60
HIVE_RPC_URL=https://api.hive.blog
HIVE_AUTH_AUDIENCE=hivelore-local-api
HIVE_MAINNET_CHAIN_ID=beeab0de00000000000000000000000000000000000000000000000000000000
HIVE_MAINNET_RPC_NODES=https://api.hive.blog
HIVE_MAINNET_HAF_URL=https://api.hive.blog/hafbe-api
HIVE_BROADCAST_MAX_ATTEMPTS=4
HIVE_BROADCAST_INITIAL_DELAY_MS=500
HIVE_BROADCAST_MAX_DELAY_MS=5000
HIVE_BROADCAST_BACKOFF_MULTIPLIER=2
HIVE_BROADCAST_JITTER_RATIO=0.2
HIVE_BROADCAST_TIMEOUT_MS=10000
HIVE_BROADCAST_TOTAL_DEADLINE_MS=90000
HIVE_CONFIRMATION_POLL_INTERVAL_MS=3000
HIVE_CONFIRMATION_TIMEOUT_MS=60000
HIVE_NODE_MAX_CONSECUTIVE_FAILURES=1
HIVE_NODE_COOLDOWN_MS=30000

# Local-only irreversible Hive mainnet smoke command inputs.
# Set these only in your local shell when running the smoke script; never commit real keys.
HIVE_SMOKE_ACCOUNT=

GOOGLE_AUTH_ENABLED=false
GOOGLE_CLIENT_ID=
GOOGLE_CLIENT_SECRET=
GOOGLE_REDIRECT_URI=http://localhost:3001/auth/google/callback

GOOGLE_HIVE_PROVISIONING_ENABLED=false
HIVE_RC_DELEGATION_ENABLED=false
HIVE_RC_DELEGATOR_ACCOUNT=
HIVE_RC_DELEGATION_AMOUNT=

# PostgreSQL application connection through the Supabase pooler.
DATABASE_URL="postgresql://USER:PASSWORD@POOLER_HOST:6543/postgres?pgbouncer=true"

# Direct PostgreSQL connection used for Prisma migrations and administrative operations.
DIRECT_URL="postgresql://USER:PASSWORD@DIRECT_HOST:5432/postgres"