# Cleat's extension implementation is Go.
LANGUAGE=go

# Funded private key for proxy signing (Hardhat dev key)
PROXY_PRIVATE_KEY="983760a4ebf75b2ac3a93531168a0f225d01e5dc6e3568adbd46233ba1fb4fa4"

# # Devnet
# INITIAL_OWNER="0xF4E021377420Afe90c1A7D2b8968904946633a64" # Initial owner address (derived from DEPLOYMENT_PRIVATE_KEY)
# DEPLOYMENT_PRIVATE_KEY="983760a4ebf75b2ac3a93531168a0f225d01e5dc6e3568adbd46233ba1fb4fa4" # Private key for the deployments and contract calls

# Coston
INITIAL_OWNER="0x123.."
DEPLOYMENT_PRIVATE_KEY="123..."

# TEE governance — the signer set + threshold that governs this extension's TEE
# machines. post-build registers it on-chain (set-governance) AND the TEE node
# signs with it; both read these same vars, so they always agree. If unset,
# defaults to GOVERNANCE_SIGNERS=<INITIAL_OWNER> (the deployer) and
# GOVERNANCE_THRESHOLD=1. Set your own to use a different governance set:
# GOVERNANCE_SIGNERS="0xAbc...,0xDef..."   # comma-separated 0x addresses
# GOVERNANCE_THRESHOLD=2

# Docker image registry (defaults to "local" for locally-built images)
# Uncomment to use remote registry:
# REGISTRY=registry.gitlab.com/flarenetwork/tee/e2e

# Chain RPC URL
CHAIN_URL=https://coston2-api.flare.network/ext/C/rpc

# Path to Coston2 deployed contract addresses
ADDRESSES_FILE=./config/coston2/deployed-addresses.json

# Must be false on live networks
LOCAL_MODE=false

# TEE attestation mode: true = use test code hash/platform (no real TEE hardware)
# Set to false when running on actual GCP Confidential VM with real attestation
SIMULATED_TEE=false
MODE=0

# Rebuild the confidential pledge map from authoritative Coston2 events at startup.
REHYDRATION_ENABLED=true
PLEDGE_REGISTRY_ADDRESS=0x4D2B2C08D7c20fE693742B0b1Cfa654eC8C8584f
REHYDRATION_FROM_BLOCK=34054987

# Normal/FTDC proxy URL on Coston2
NORMAL_PROXY_URL=https://tee-proxy-coston2-1.flare.rocks

# Extension proxy URL (local)
# Overwritten automatically when start-services.sh syncs the cloudflared tunnel
# (--tunnel, or any already-running tunnel). Set it by hand for ngrok.
# EXT_PROXY_URL=http://localhost:6674
EXT_PROXY_URL=https://<your-ngrok-url>.ngrok-free.dev

# Optional Cloudflare tunnel for local testnet development.
# TUNNEL_ARGS=run --token eyJ...              # named tunnel = stable hostname
# TUNNEL_TARGET=http://host.docker.internal:6664   # only if the proxy is not on 6674

# --- Docker Compose overrides (all have defaults, uncomment to customize) ---
# SOURCE_DATE_EPOCH=            # Unix timestamp for reproducible builds (auto-derived from git by start-services.sh)
# CHAIN_ID=31337                # Chain id the node binds signatures to (local=31337, coston=16, coston2=114)
# LOG_LEVEL=INFO                # TEE node log level
# MODE=1                        # TEE node mode
# REDIS_BIND=127.0.0.1:6382    # Host port binding for the extension Redis
# EXT_PROXY_INTERNAL_BIND=0.0.0.0:6673  # Host port binding for proxy internal API
# EXT_PROXY_EXTERNAL_BIND=0.0.0.0:6674  # Host port binding for proxy external API
# COMPOSE_NETWORK=docker_default         # Docker network name (base compose joins this external network)
# USE_LOCAL_SIBLINGS=0          # Set to 1 to build node/proxy from on-disk sibling checkouts
# WAIT_TIMEOUT=                 # Timeout for post-build registration waits
# TEE_VERSION=                  # TEE version label for allow-tee-version