.env.example

# ---------------------------------------------------------------------------
# Earnly environment. Copy to `.env.local` for development and set the same
# keys in Vercel → Project → Settings → Environment Variables for production.
# Nothing here is a real credential: never commit a filled-in copy.
# ---------------------------------------------------------------------------

# --- Google OAuth (server-side only) ---
GOOGLE_CLIENT_ID=
GOOGLE_CLIENT_SECRET=

# --- Neon Postgres ---
DATABASE_URL=
DATABASE_URL_POOLED=

# --- Session signing + public origin ---
AUTH_SECRET=
APP_URL=

# --- Wallet key custody (server-side only) ---
# 32 random bytes, base64 or hex. Encrypts wallet signing secrets at rest with
# AES-256-GCM. Generate with: openssl rand -base64 32
# Rotating this key invalidates stored ciphertext, so a rotation is a migration.
WALLET_MASTER_KEY=

# --- Stellar Testnet (optional overrides) ---
# Defaults are the official Testnet endpoints. A Mainnet Horizon URL is refused
# at the signing boundary, so these should only ever point at Testnet.
STELLAR_HORIZON_URL=https://horizon-testnet.stellar.org
STELLAR_FRIENDBOT_URL=https://friendbot.stellar.org

# --- Ethereum Sepolia (server-side only) ---
# Any Sepolia JSON-RPC endpoint. A dedicated provider (Alchemy, Infura, …) is
# recommended for production traffic; the default is a public endpoint.
SEPOLIA_RPC_URL=https://sepolia.drpc.org
# Optional. Free, keyless history API used for the Sepolia activity list.
SEPOLIA_EXPLORER_API=https://eth-sepolia.blockscout.com

# --- Optional: managed signing provider (not configured in this release) ---
# Set these only once a managed signer (Turnkey / Privy / Crossmint) is wired in.
# See docs/wallet-integration.md for exactly what is still required.
# MANAGED_SIGNER_PROVIDER=
# MANAGED_SIGNER_API_KEY=
# MANAGED_SIGNER_ORGANISATION_ID=