.env.example

# Database
DATABASE_URL="postgresql://guardagent:guardagent@localhost:5433/guardagent?connection_limit=30&pool_timeout=30"
DB_USER=guardagent
DB_PASSWORD=guardagent          # CHANGE IN PRODUCTION!
DB_NAME=guardagent
DB_PORT=5433

# Redis
REDIS_URL="redis://localhost:6379"
REDIS_PASSWORD="change-me-redis-password"   # REQUIRED for docker compose
REDIS_PORT=6380

# JWT + shared secrets
JWT_SECRET="change-me-in-production-min-32-chars"
ADMIN_SECRET="change-me-admin-secret-min-32-chars"
BOT_SHARED_SECRET="change-me-shared-secret-backend-bot"
LOG_LEVEL=info

# Auth (Privy) - https://dashboard.privy.io
PRIVY_APP_ID=
PRIVY_APP_SECRET=
NEXT_PUBLIC_CIRCLE_APP_ID=
CIRCLE_APP_ID=
SIWE_ALLOWED_DOMAINS="localhost:3009"

# Telegram Bot
TELEGRAM_BOT_TOKEN="your-telegram-bot-token"

# OpenRouter AI (free tier: meta-llama/llama-3.3-70b-instruct:free)
# Get your key at https://openrouter.ai/keys
OPENROUTER_API_KEY="sk-or-v1-..."

# Arc Network
ARC_NETWORK=arc-testnet

# Circle Developer-Controlled Wallets (https://console.circle.com)
# CIRCLE_ENTITY_SECRET + CIRCLE_WALLET_SET_ID are produced by:
#   docker compose run --rm backend npm run circle:setup --workspace=packages/backend
CIRCLE_API_KEY=
CIRCLE_ENTITY_SECRET=
CIRCLE_WALLET_SET_ID=
CIRCLE_KIT_KEY=
# EOA or SCA (SCA = gasless via Gas Station on Arc testnet)
WALLET_ACCOUNT_TYPE=SCA

# Circle StableFX (USDC<->EURC swap) - apply at https://www.circle.com/join-stablefx
STABLEFX_API_KEY=

# Pyth Network
PYTH_ENDPOINT="https://hermes.pyth.network"

# Frontend (for docker compose use the mapped host ports: api 3010, web 3009)
NEXT_PUBLIC_API_URL="http://localhost:3010/api"
NEXT_PUBLIC_CHAIN_ID="5042002"
NEXT_PUBLIC_WALLETCONNECT_PROJECT_ID=

# Backend
PORT=3001
FRONTEND_URL="http://localhost:3009"
BACKEND_URL="http://backend:3001"
NODE_ENV="development"

# Admin API (for recovery, moderation)
ADMIN_API_KEY="generate-strong-key-here-min-32-chars"

# Backups
BACKUP_PATH="./backups"         # Local path for database backups

# Offsite Backups (choose method: scp | s3 | restic)
OFFSITE_METHOD="scp"
# For SCP:
OFFSITE_HOST="backup-server.example.com"
OFFSITE_USER="backup"
OFFSITE_PATH="/opt/backups/guardagent"
OFFSITE_SSH_KEY="/root/.ssh/backup_key"
# For S3: S3_BUCKET, S3_ENDPOINT (optional), AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY
# For Restic: RESTIC_REPOSITORY, RESTIC_PASSWORD

# Monitoring - admin Telegram for alerts
ADMIN_TELEGRAM_CHAT_ID="your-telegram-chat-id"

# Sentry Error Monitoring (optional - leave empty to disable)
SENTRY_DSN=

# Anthropic (Claude) - for /api/infer pay-per-inference endpoint + rule parsing
# https://console.anthropic.com
ANTHROPIC_API_KEY=

# x402 Nanopayments - pay-per-inference via Circle Gateway (https://developers.circle.com/stablecoins/nanopayments)
# SELLER_WALLET_ADDRESS: the EVM wallet that receives USDC payments from callers.
#   Use the agent wallet address or a dedicated treasury wallet on Arc.
#   If not set, /api/infer will work in dev mode (no payment required).
SELLER_WALLET_ADDRESS=
# INFER_PRICE_USD: price per inference query, e.g. "$0.001" = 0.1 cent
INFER_PRICE_USD="$0.001"
# NANOPAY_DEMO_MODE: set to "true" to bypass x402 payment entirely (local dev without a funded wallet).
# Testnet facilitator (gateway-api-testnet.circle.com) supports Arc Testnet (eip155:5042002).
# Set X402_FACILITATOR_URL=https://gateway-api-testnet.circle.com and leave NANOPAY_DEMO_MODE unset for real x402.
NANOPAY_DEMO_MODE=false