.env.example

# Server
PORT=3000

# Stellar network: "testnet" or "public"
STELLAR_NETWORK=testnet
STELLAR_HORIZON_URL=https://horizon-testnet.stellar.org

# Gateway wallet — the account that receives payments.
STELLAR_GATEWAY_PUBLIC=GXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
STELLAR_GATEWAY_SECRET=SXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

# USDC issuer (testnet issuer shown; use the public-network issuer in production)
USDC_ISSUER=GBBD47IF6LWK7P7MDEVSCWR7DPUWV3NY3DTQEVFL4NAT4AQH3ZLLFLA5

# Database — sqlx connection string (NOT a file path)
DATABASE_URL=sqlite:stellargate.db

# Payment detection mode:
#   stream — subscribe to Horizon's SSE payment stream for ~1s settlement,
#            with the poller running alongside as a reconciler (default)
#   poll   — interval polling only (no streaming connection)
STELLAR_LISTENER_MODE=stream

# How often (seconds) the Horizon poller reconciles pending payments.
# In stream mode this is the fallback that catches events missed on reconnect.
POLL_INTERVAL_SECS=10

# How long (seconds) a payment intent stays pending before it is expired,
# counted from its created_at. Default: 3600 (1 hour).
PAYMENT_TTL_SECS=3600

# Webhooks — secret signs the X-StellarGate-Signature header (HMAC-SHA256)
WEBHOOK_SECRET=your_webhook_signing_secret
WEBHOOK_RETRY_ATTEMPTS=3
WEBHOOK_RETRY_DELAY_MS=5000

# CORS — comma-separated list of allowed origins.
# Required when STELLAR_NETWORK=public; omit only for local dev (testnet).
# Example: CORS_ALLOWED_ORIGINS=https://app.example.com,https://www.example.com
CORS_ALLOWED_ORIGINS=

# Rate limiting — requests per second per IP for POST /payments
RATE_LIMIT_REQUESTS_PER_SEC=10

# SQLite connection pool tuning
# WAL mode + busy_timeout prevent "database is locked" under concurrent writes.
DB_POOL_MAX_CONNECTIONS=10
DB_BUSY_TIMEOUT_MS=5000