# General
ARCHON_UID=1000
ARCHON_GID=1000
ARCHON_DEBUG=false
ARCHON_NODE_ID=mynodeID
ARCHON_NODE_NAME=mynodeName

# Security — set these in production deployments
# Bind services to localhost when behind a reverse proxy (nginx, Caddy, etc.)
ARCHON_BIND_ADDRESS=0.0.0.0
# Set a strong random key to protect admin API routes (wallet, db reset, etc.)
# Generate with: openssl rand -hex 32
ARCHON_ADMIN_API_KEY=

# Gatekeeper
# Implementation flavor: `ts` (default) or `rust`. Selects which
# docker-compose.gatekeeper-*.yml is pulled in by docker-compose.yml.
ARCHON_GATEKEEPER_FLAVOR=ts
ARCHON_GATEKEEPER_PORT=4224
ARCHON_GATEKEEPER_DID_PREFIX=did:cid
ARCHON_GATEKEEPER_DB=redis
ARCHON_GATEKEEPER_REGISTRIES=hyperswarm
ARCHON_GATEKEEPER_JSON_LIMIT=10mb
ARCHON_GATEKEEPER_UPLOAD_LIMIT=10mb
ARCHON_GATEKEEPER_GC_INTERVAL=60
ARCHON_GATEKEEPER_STATUS_INTERVAL=1
ARCHON_GATEKEEPER_FALLBACK_URL=https://dev.uniresolver.io
ARCHON_GATEKEEPER_FALLBACK_TIMEOUT=5000

# Keymaster
# Implementation flavor: `ts` (default) or `py`. Selects which
# docker-compose.keymaster-*.yml is pulled in by docker-compose.yml.
ARCHON_KEYMASTER_FLAVOR=ts
ARCHON_KEYMASTER_PORT=4226
ARCHON_KEYMASTER_DB=json
ARCHON_ENCRYPTED_PASSPHRASE=
ARCHON_WALLET_CACHE=false
ARCHON_DEFAULT_REGISTRY=hyperswarm
ARCHON_KEYMASTER_UPLOAD_LIMIT=10mb

# React-Wallet
ARCHON_REACT_WALLET_PORT=4228
# Optional build-time override for the React wallet backend URL.
# If unset, the wallet keeps its default from apps/react-wallet/.env.production.
ARCHON_REACT_WALLET_GATEKEEPER_URL=

# Herald
# Set only one of the next two values:
# - ARCHON_HERALD_KEYMASTER_URL for shared Keymaster mode
# - ARCHON_HERALD_WALLET_PASSPHRASE for standalone Herald wallet mode
# To migrate a legacy name-service wallet/DB:
# - set ARCHON_HERALD_KEYMASTER_URL= and set ARCHON_HERALD_WALLET_PASSPHRASE
# - copy the old wallet.json and db.json into data/herald/
ARCHON_HERALD_PORT=4230
ARCHON_HERALD_CLIENT_PORT=4231
ARCHON_HERALD_NAME=herald
ARCHON_HERALD_DOMAIN=localhost
ARCHON_HERALD_WALLET_PASSPHRASE=
ARCHON_HERALD_KEYMASTER_URL=http://keymaster:4226
ARCHON_HERALD_WALLET_URL=https://wallet.your-domain.example
ARCHON_HERALD_DB=json
ARCHON_HERALD_SESSION_SECRET=
ARCHON_HERALD_IPNS_KEY_NAME=herald
ARCHON_HERALD_MEMBERSHIP_SCHEMA_DID=did:cid:bagaaieravnv5onsflewvrz6urhwfjixfnwq7bgc3ejhlrj2nekx75ddhdupq
ARCHON_HERALD_OWNER_DID=

# Herald Email Bridge (optional — omit SENDGRID_API_KEY to disable)
ARCHON_HERALD_SENDGRID_API_KEY=
ARCHON_HERALD_SENDGRID_FROM_EMAIL=dmail@your-domain.example
ARCHON_HERALD_SENDGRID_PARSE_DOMAIN=parse.your-domain.example
ARCHON_HERALD_WEBHOOK_SECRET=          # webhook secret; use the same value in SendGrid Inbound Parse URL: https://host/names/api/inbound-email?secret=<this-value>

# CLI
ARCHON_GATEKEEPER_URL=http://localhost:4224
ARCHON_KEYMASTER_URL=http://localhost:4226

# Hyperswarm
ARCHON_HYPR_EXPORT_INTERVAL=2
ARCHON_PROTOCOL=/ARCHON/v0.2-reboot

# Bitcoin mediator
ARCHON_BTC_HOST=localhost
ARCHON_BTC_CHAIN=BTC
ARCHON_BTC_NETWORK=bitcoin
ARCHON_BTC_START_BLOCK=934000
ARCHON_BTC_PORT=8332
ARCHON_BTC_USER=bitcoin
ARCHON_BTC_PASS=bitcoin
ARCHON_BTC_IMPORT_INTERVAL=1
ARCHON_BTC_EXPORT_INTERVAL=1
ARCHON_BTC_FEE_BLOCK_TARGET=1
ARCHON_BTC_FEE_FALLBACK_SAT_BYTE=10
ARCHON_BTC_FEE_MAX=0.00010000
ARCHON_BTC_FEE_ORACLE_URL=https://mempool.space/api/v1/fees/recommended
ARCHON_BTC_RBF_ENABLED=true
ARCHON_BTC_REIMPORT=true
ARCHON_BTC_DB=json

# Bitcoin testnet4 mediator
ARCHON_BTC_T4_HOST=localhost
ARCHON_BTC_T4_CHAIN=BTC:testnet4
ARCHON_BTC_T4_NETWORK=testnet
ARCHON_BTC_T4_START_BLOCK=120000
ARCHON_BTC_T4_PORT=48332
ARCHON_BTC_T4_USER=testnet4
ARCHON_BTC_T4_PASS=testnet4
ARCHON_BTC_T4_IMPORT_INTERVAL=1
ARCHON_BTC_T4_EXPORT_INTERVAL=1
ARCHON_BTC_T4_FEE_BLOCK_TARGET=1
ARCHON_BTC_T4_FEE_FALLBACK_SAT_BYTE=10
ARCHON_BTC_T4_FEE_MAX=0.00200000
ARCHON_BTC_T4_FEE_ORACLE_URL=
ARCHON_BTC_T4_RBF_ENABLED=false
ARCHON_BTC_T4_REIMPORT=true
ARCHON_BTC_T4_DB=json

# BTC signet mediator
ARCHON_SIGNET_HOST=localhost
ARCHON_SIGNET_START_BLOCK=288000
ARCHON_SIGNET_PORT=38332
ARCHON_SIGNET_USER=signet
ARCHON_SIGNET_PASS=signet
ARCHON_SIGNET_WALLET=archon
ARCHON_SIGNET_IMPORT_INTERVAL=1
ARCHON_SIGNET_EXPORT_INTERVAL=1
ARCHON_SIGNET_FEE_BLOCK_TARGET=1
ARCHON_SIGNET_FEE_FALLBACK_SAT_BYTE=10
ARCHON_SIGNET_FEE_MAX=0.00003000
ARCHON_SIGNET_FEE_ORACLE_URL=
ARCHON_SIGNET_RBF_ENABLED=false
ARCHON_SIGNET_REIMPORT=true
ARCHON_SIGNET_DB=json

# BTC signet inscribed mediator
ARCHON_SIGNET_INS_HOST=localhost
ARCHON_SIGNET_INS_START_BLOCK=262868
ARCHON_SIGNET_INS_PORT=38332
ARCHON_SIGNET_INS_USER=signet
ARCHON_SIGNET_INS_PASS=signet
ARCHON_SIGNET_INS_WALLET=archon
ARCHON_SIGNET_INS_IMPORT_INTERVAL=1
ARCHON_SIGNET_INS_EXPORT_INTERVAL=1
ARCHON_SIGNET_INS_FEE_BLOCK_TARGET=1
ARCHON_SIGNET_INS_FEE_FALLBACK_SAT_BYTE=10
ARCHON_SIGNET_INS_FEE_MAX=0.00200000
ARCHON_SIGNET_INS_RBF_ENABLED=false
ARCHON_SIGNET_INS_REIMPORT=true
ARCHON_SIGNET_INS_DB=json

# IPFS mediator
ARCHON_IPFS_INTERVAL=60
ARCHON_IPFS_BATCH_SIZE=100
ARCHON_IPFS_CONCURRENCY=10

# Core Lightning (cl-hive)
ARCHON_CLN_VERSION=3.1.0
ARCHON_CLN_ALIAS=archon
ARCHON_CLN_RGB=e33502
ARCHON_CLN_PORT=9736
ARCHON_CLN_NETWORK_MODE=tor
ARCHON_CLN_ANNOUNCE_ADDR=
ARCHON_CLN_GOVERNANCE_MODE=advisor
ARCHON_CLN_ARCHON_VERSION=v0.1.0
ARCHON_CLN_LOG_LEVEL=info

# RTL (Ride The Lightning)
ARCHON_RTL_PORT=3002
ARCHON_RTL_PASSWORD=changeme

# LNbits
ARCHON_LNBITS_PORT=5000

# Drawbridge (L402 API Gateway)
# ARCHON_DRAWBRIDGE_L402_ENABLED=true
ARCHON_DRAWBRIDGE_PORT=4222
ARCHON_DRAWBRIDGE_PUBLIC_HOST=
ARCHON_LIGHTNING_MEDIATOR_URL=http://lightning-mediator:4235
ARCHON_DRAWBRIDGE_DEFAULT_PRICE_SATS=10
ARCHON_DRAWBRIDGE_INVOICE_EXPIRY=3600
ARCHON_DRAWBRIDGE_RATE_LIMIT_MAX=100
ARCHON_DRAWBRIDGE_RATE_LIMIT_WINDOW=60
# Drawbridge only needs the macaroon secret locally; Lightning backends now live in lightning-mediator.
# ARCHON_DRAWBRIDGE_MACAROON_SECRET=

# Lightning mediator
ARCHON_LIGHTNING_MEDIATOR_CLN_REST_URL=https://cln:3001
ARCHON_LIGHTNING_MEDIATOR_LNBITS_URL=http://lnbits:5000
# ARCHON_LIGHTNING_MEDIATOR_CLN_RUNE=
# ARCHON_LIGHTNING_MEDIATOR_PUBLIC_HOST=
# ARCHON_LIGHTNING_MEDIATOR_TOR_PROXY=tor:9050

# Observability (Grafana)
GRAFANA_ADMIN_USER=admin
GRAFANA_ADMIN_PASSWORD=admin