VacciChain/.env.example at main · Abd-Standard/VacciChain · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
# ── Stellar / Soroban ────────────────────────────────────────────────────────
# testnet | mainnet  (default: testnet)
STELLAR_NETWORK=testnet

# Horizon REST API for the chosen network
HORIZON_URL=https://horizon-testnet.stellar.org

# Soroban RPC endpoint for contract simulation and submission
SOROBAN_RPC_URL=https://soroban-testnet.stellar.org

# Must exactly match the target network passphrase
STELLAR_NETWORK_PASSPHRASE=Test SDF Network ; September 2015

# ── Contract ─────────────────────────────────────────────────────────────────
# 56-char contract address starting with C — output of `make deploy`
VACCINATIONS_CONTRACT_ID=

# ── Backend auth ─────────────────────────────────────────────────────────────
# Secret key for admin contract invocations (starts with S)
ADMIN_SECRET_KEY=

# Public key matching ADMIN_SECRET_KEY (starts with G) — grants issuer role on login
ADMIN_PUBLIC_KEY=

# Dedicated secret key for signing SEP-10 challenges (starts with S)
SEP10_SERVER_KEY=

# Secret key for signing mint/revoke transactions (starts with S)
ISSUER_SECRET_KEY=

# JWT signing secret — min 32 chars recommended; rotate to invalidate sessions
JWT_SECRET=

# ── Backend server ────────────────────────────────────────────────────────────
# TCP port for the Express backend (default: 4000)
PORT=4000

# Maximum JSON request body size accepted by the API (default: 10kb)
BODY_LIMIT=10kb

# ── Rate limiting ─────────────────────────────────────────────────────────────
# Max SEP-10 challenge requests per IP per minute (default: 10)
RATE_LIMIT_SEP10=10

# Max public verify requests per IP per minute (default: 60)
RATE_LIMIT_VERIFY=60

# ── Audit log ─────────────────────────────────────────────────────────────────
# Path to append-only NDJSON audit log (default: ./audit.log)
AUDIT_LOG_PATH=./audit.log

# ── Python analytics service ──────────────────────────────────────────────────
# TCP port for the FastAPI analytics service (default: 8001)
ANALYTICS_PORT=8001

# Base URL the analytics service uses to reach the backend (default set by Compose)
BACKEND_URL=http://backend:4000

# ── Backup service ────────────────────────────────────────────────────────────
# S3 Bucket for analytics DB backup
S3_BUCKET_NAME=
# AWS Credentials for S3 access
AWS_ACCESS_KEY_ID=
AWS_SECRET_ACCESS_KEY=
AWS_REGION=us-east-1
# Number of days to retain backups
RETENTION_DAYS=30
DEMO_ISSUER_SECRET=
ADMIN_SECRET=