.env.example

NODE_ENV=development
PORT=4000
DATABASE_URL=postgresql://earnproof:earnproof@localhost:5432/earnproof
REDIS_URL=redis://localhost:6379
APP_URL=http://localhost:3000
API_URL=http://localhost:4000
STELLAR_NETWORK=testnet
STELLAR_HORIZON_URL=https://horizon-testnet.stellar.org
STELLAR_NETWORK_PASSPHRASE=Test SDF Network ; September 2015
SESSION_SECRET=replace_me
# Optional cron expression for expired authentication-session cleanup.
# Defaults to midnight every day.
AUTH_SESSION_CLEANUP_CRON=0 0 * * *
CREDENTIAL_SIGNING_SECRET=replace_me
PAYMENT_ENCRYPTION_KEY=MDEyMzQ1Njc4OWFiY2RlZjAxMjM0NTY3ODlhYmNkZWY=
CONTRACT_ANCHORING_ENABLED=false
CONTRACT_ANCHORING_REQUIRED=false
STELLAR_CLI_PATH=stellar
STELLAR_CLI_SOURCE=
PROOF_REGISTRY_CONTRACT_ID=
ISSUER_REGISTRY_ENABLED=false
ISSUER_REGISTRY_CONTRACT_ID=
EARNPROOF_ISSUER_ADDRESS=i
EARNPROOF_SCHEMA_VERSION=1

# Verification Event Privacy Configuration
# VERIFICATION_EVENT_RETENTION_DAYS: How long to retain privacy-safe verification events before deletion
# This controls the retention window for aggregate analytics on proof verification outcomes.
# All PII (IP, user agent, credentials) is redacted and replaced with non-identifying metadata hashes.
# Default: 90 days. Set to 0 to disable retention cleanup.
VERIFICATION_EVENT_RETENTION_DAYS=90

# Verification Event Hash Salt Rotation
# VERIFICATION_HASH_SALT_V*: Versioned salts for hashing verification metadata
# Salt rotates every 30 days (saltVersion = floor(daysSinceEpoch / 30))
# Different versions produce different hashes for same input, reducing long-term linkability
# Must be cryptographically strong random values (at least 32 characters)
# Configure multiple versions to support rolling salt rotation:
#   - VERIFICATION_HASH_SALT_V0=<old-salt>
#   - VERIFICATION_HASH_SALT_V1=<current-salt>
#   - VERIFICATION_HASH_SALT_V2=<next-salt>
# Example: VERIFICATION_HASH_SALT_V0=YourCryptographicallyRandomSaltV0xxx
VERIFICATION_HASH_SALT_V0=replace_me_with_cryptographic_random_value_32_chars_min