# Production Environment Configuration Template
# Copy this to /home/explorer/explorer-monorepo/.env and fill in values
# See docs/PRODUCTION_CHECKLIST.md for JWT_SECRET and migration steps before going live.

# ============================================
# Database Configuration
# ============================================
DB_HOST=localhost
DB_PORT=5432
DB_USER=explorer
DB_PASSWORD=CHANGE_THIS_SECURE_PASSWORD
DB_NAME=explorer
DB_MAX_CONNECTIONS=50
DB_MAX_IDLE_TIME=5m
DB_CONN_MAX_LIFETIME=1h

# Read Replica (optional)
DB_REPLICA_HOST=
DB_REPLICA_PORT=5432
DB_REPLICA_USER=
DB_REPLICA_PASSWORD=
DB_REPLICA_NAME=

# ============================================
# RPC Configuration
# ============================================
# Public RPC Endpoints (ChainID 138) - Internal IP Addresses
# Using internal IP for direct connection (no proxy overhead)
RPC_URL=http://192.168.11.221:8545
WS_URL=ws://192.168.11.221:8546
CHAIN_ID=138

# Alternative RPC Endpoints (if needed)
# Public RPC (via domain/proxy): https://rpc-http-pub.d-bis.org
# Public WS (via domain/proxy): wss://rpc-ws-pub.d-bis.org
# Private RPC (internal IP): http://192.168.11.211:8545
# Private WS (internal IP): ws://192.168.11.211:8546
# Private RPC (via domain/proxy): https://rpc-http-prv.d-bis.org
# Private WS (via domain/proxy): wss://rpc-ws-prv.d-bis.org

# ============================================
# Search Configuration (Elasticsearch/OpenSearch)
# ============================================
SEARCH_URL=http://localhost:9200
SEARCH_USERNAME=
SEARCH_PASSWORD=
SEARCH_USE_SSL=false
SEARCH_INDEX_PREFIX=explorer-prod

# ============================================
# API Configuration
# ============================================
PORT=8080
API_GATEWAY_PORT=8081
CHAIN_ID=138

# ============================================
# Frontend Configuration
# ============================================
NEXT_PUBLIC_API_URL=https://explorer.d-bis.org/api
NEXT_PUBLIC_CHAIN_ID=138

# ============================================
# Redis Configuration
# ============================================
REDIS_URL=redis://localhost:6379

# ============================================
# Message Queue Configuration (Optional)
# ============================================
KAFKA_BROKERS=localhost:9092
# or
RABBITMQ_URL=amqp://guest:guest@localhost:5672/

# ============================================
# Cloudflare Configuration
# ============================================
CLOUDFLARE_API_TOKEN=
CLOUDFLARE_ZONE_ID=
CLOUDFLARE_ACCOUNT_ID=

# ============================================
# External API Keys (for integrations)
# ============================================
# DEX Aggregators
ONEINCH_API_KEY=
ZEROX_API_KEY=
PARASWAP_API_KEY=

# KYC Providers
JUMIO_API_KEY=
JUMIO_API_SECRET=
ONFIDO_API_KEY=

# Payment Rails
MOONPAY_API_KEY=
RAMP_API_KEY=

# WalletConnect
WALLETCONNECT_PROJECT_ID=

# Soul Machines (VTM)
SOUL_MACHINES_API_KEY=
SOUL_MACHINES_API_SECRET=

# ============================================
# Security
# ============================================
# Optional: restrict CORS (default *). Example: https://explorer.d-bis.org
CORS_ALLOWED_ORIGIN=
JWT_SECRET=CHANGE_THIS_JWT_SECRET
ENCRYPTION_KEY=CHANGE_THIS_ENCRYPTION_KEY_32_BYTES

# ============================================
# Monitoring (Optional)
# ============================================
SENTRY_DSN=
DATADOG_API_KEY=
PROMETHEUS_ENABLED=false

# ============================================
# Feature Flags
# ============================================
ENABLE_GRAPHQL=true
ENABLE_WEBSOCKET=true
ENABLE_ANALYTICS=true
ENABLE_VTM=false
ENABLE_XR=false