forked from SYMBaiEX/GitShipt
-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy path.env.example
More file actions
111 lines (95 loc) · 4.21 KB
/
Copy path.env.example
File metadata and controls
111 lines (95 loc) · 4.21 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
# GitShipt environment variables
# Copy this file to .env.local for local dev; populate via Vercel dashboard
# (with Sensitive flag on every secret) for production.
# NEVER commit .env.local or any populated env file.
# ---- App ----
# Production/live launch readiness:
# NEXT_PUBLIC_APP_URL must be the canonical deployed HTTPS origin.
# NEXT_PUBLIC_SOLANA_CLUSTER must be mainnet-beta.
NEXT_PUBLIC_APP_URL=http://localhost:3000
NEXT_PUBLIC_SOLANA_CLUSTER=devnet
# ---- Database (Neon Postgres) ----
# Provision via Vercel Marketplace Neon. Keep connection strings server-only.
# The app prefers DATABASE_URL/DATABASE_URL_UNPOOLED from Neon and accepts
# POSTGRES_URL/POSTGRES_URL_NON_POOLING as generic Postgres aliases.
DATABASE_URL=
DATABASE_URL_UNPOOLED=
POSTGRES_URL=
POSTGRES_URL_NON_POOLING=
SUPABASE_URL=
# Optional generic provider secret; only needed if a future server-side provider
# API client is added.
SUPABASE_SECRET_KEY=
# ---- Redis (any provider speaking standard Redis protocol) ----
# Format: redis://[user]:[pass]@host:port OR rediss:// for TLS.
# Works with Redis Cloud, Upstash (TCP/TLS), Dragonfly, self-hosted.
REDIS_URL=
# Vercel Upstash integration may provide this TCP/TLS alias instead.
UPSTASH_REDIS_REST_REDIS_URL=
# ---- Auth (better-auth + GitHub OAuth) ----
# 32+ random bytes. Generate with: openssl rand -base64 48
BETTER_AUTH_SECRET=
BETTER_AUTH_URL=http://localhost:3000
# Register a GitHub OAuth App at https://github.com/settings/applications/new
# Authorization callback URL: http://localhost:3000/api/auth/callback/github
GITHUB_CLIENT_ID=
GITHUB_CLIENT_SECRET=
# ---- GitHub App (for repo permissions + webhooks) ----
# Register at https://github.com/settings/apps/new with permissions:
# metadata: read, contents: read, pull_requests: read
# Webhook events: push, pull_request, installation
GITHUB_APP_ID=
GITHUB_APP_PRIVATE_KEY=
GITHUB_APP_WEBHOOK_SECRET=
GITHUB_APP_SLUG=
# ---- Bags.fm ----
# BAGS_API_KEY is the private Bags API credential; mark it Sensitive in Vercel.
BAGS_API_KEY=
BAGS_API_BASE_URL=https://public-api-v2.bags.fm/api/v1/
BAGS_WEBHOOK_SECRET=
# Public partner wallet + referral code used on launch configs and Bags handoffs.
# In production, BAGS_PARTNER_CONFIG_KEY must be the Bags config key for this
# exact wallet. Do not commit the real key; set it in deployment env and mark it
# Sensitive under the repo policy for *_KEY values.
BAGS_PARTNER_WALLET=HXs58Qa6YtgJfWVkQVnpFmw6WoEdFEL4LLD1ArZjMvTH
BAGS_REF_CODE=symbiex
BAGS_PARTNER_CONFIG_KEY=
BAGS_CONFIG_TYPE=
# Safety: refuse real launch txns when devnet cluster + prod key.
# Flip to true ONLY for the actual mainnet demo.
BAGS_ALLOW_PROD_LAUNCH=false
# Production must keep stubs disabled.
ALLOW_STUBS_IN_PROD=false
# ---- Solana ----
# Helius RPC. Use mainnet-beta in production/live Bags launches.
HELIUS_RPC_URL=https://devnet.helius-rpc.com/?api-key=YOUR_KEY
# Hot wallet for daily payouts. Base58-encoded keypair. ALWAYS Sensitive.
# Generate via: bun scripts/gen-payout-keypair.mjs
SOLANA_PAYOUT_KEYPAIR=
# Cold treasury (public address only, never the private key). Required when
# PLATFORM_FEE_BPS_DEFAULT or a project platform fee is greater than 0.
SOLANA_TREASURY_ADDRESS=
# ---- Cron ----
# 32+ random chars. Validates Vercel cron requests via Authorization: Bearer.
# Compared with crypto.timingSafeEqual at the cron edge.
# Generate with: openssl rand -base64 32
CRON_SECRET=
# ---- Idempotency ----
# 32+ random chars. HMAC key that signs every cached idempotency response so
# a leaked or guessed key cannot replay a stored signature.
# Generate with: openssl rand -base64 32
IDEMPOTENCY_KEY_SECRET=
# ---- Platform ----
PLATFORM_FEE_BPS_DEFAULT=500
ADMIN_EMAIL_ALLOWLIST=
KILL_SWITCH_ENABLED=false
# Out-of-band emergency stop. When true, every entry into trading-controls
# returns halted=true regardless of the platform_config DB row. Use during
# an incident when the DB itself may be unhealthy.
EMERGENCY_KILL_SWITCH=false
# Demo seeder hard gate. Refuses to run unless this is true AND NODE_ENV is
# non-production. Never set in production environments.
ALLOW_DEMO_SEED=false
# Allow non-Neon DATABASE_URL in production (RLS becomes app-only). Off by
# default; set true only with a documented mitigation plan.
ALLOW_NON_NEON_RLS_OFF=false