.env.example

DATABASE_URL="postgresql://postgres:password@localhost:5432/clipscash?schema=public"

# JWT
JWT_SECRET="your_jwt_secret"
JWT_EXPIRES=3600
JWT_REFRESH_EXPIRES_DAYS=14

# Google OAuth
GOOGLE_CLIENT_ID="your_google_client_id"
GOOGLE_CLIENT_SECRET="your_google_client_secret"
GOOGLE_CALLBACK_URL="http://localhost:3000/auth/google/callback"

# Magic link / Email (SMTP)
APP_BASE_URL="http://localhost:3000"
SMTP_HOST="smtp.ethereal.email"
SMTP_PORT=587
SMTP_SECURE=false
SMTP_USER="your_smtp_user"
SMTP_PASS="your_smtp_pass"
SMTP_FROM='"Clips App" <noreply@clips.app>'

# CORS
ALLOWED_ORIGINS="http://localhost:3000,http://localhost:3001"

# Redis Configuration
REDIS_HOST="localhost"
REDIS_PORT=6379
REDIS_PASSWORD=""

# Brute Force Protection
BRUTE_FORCE_MAX_ATTEMPTS=5
BRUTE_FORCE_LOCKOUT_DURATION=900
BRUTE_FORCE_WINDOW_DURATION=900
 
 # Rate Limiting
 # Comma-separated list of IP addresses to bypass rate limiting
 THROTTLER_WHITELIST=127.0.0.1,::1

# JWT Cookie Settings
# Set to 'true' to use httpOnly cookies instead of returning tokens in the response body.
# COOKIE_SECURE: set to 'false' only in local HTTP dev environments (defaults to true)
# COOKIE_SAME_SITE: 'lax' (recommended), 'strict', or 'none' (requires COOKIE_SECURE=true)
COOKIE_SECURE=true
COOKIE_SAME_SITE=lax

# Stellar Network
# Set to 'testnet' for development/staging or 'public' for mainnet.
# Defaults to 'testnet' if not set.
STELLAR_NETWORK=testnet

# Minimum Stellar payout amount in USD equivalent.
# Payouts below this value are rejected to avoid wasting fees on micro-transactions.
# Defaults to 5 if not set.
# Stellar NFT Royalties
PLATFORM_ROYALTY_BPS=100
PLATFORM_WALLET_ADDRESS="GDV76E6XN6A3Q3WXVZ4KPRQ7L6E6XN6A3Q3WXVZ4KPRQ7L6E6XN6"

# Soroban NFT Contract
# This contract implements NFT minting with royalty payments and platform fee tracking.
# The contract maintains a persistent 'total_platform_fees' variable that accumulates
# all platform fees (5% of each sale) from royalty payments.
# Query platform revenue via: GET /platform/revenue (public endpoint)
SOROBAN_NFT_CONTRACT_ID="CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEU4"

# IPFS / Pinata (required for NFT metadata upload)
PINATA_JWT="your_pinata_jwt_token"
# IPFS_API_URL="https://api.pinata.cloud/pinning/pinJSONToIPFS"  # default