qpayd/qpayd.example.toml at master · earonesty/qpayd · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
[server]
listen = "127.0.0.1:8080"
onchain_poll_seconds = 30
# public_allowed_origins = ["https://example.com"]

# [server.admin]
# enabled = true
# store_id = "main"
# asset_source = "https://cdn.jsdelivr.net/npm/@qpayd/admin@0.4.0/src/index.js"
# asset_integrity = "sha384-..."

[database]
url = "sqlite://qpayd.db"

[pricing]
kraken_url = "https://api.kraken.com/0/public/Ticker"
stale_after_seconds = 60

[auth]
api_token_env = "QPAYD_API_TOKEN"
# Optional scoped tokens. If omitted, qpayd falls back through payout -> admin -> api.
# admin_token_env = "QPAYD_ADMIN_TOKEN"
# payout_token_env = "QPAYD_PAYOUT_TOKEN"

[[stores]]
id = "main"
name = "Main Store"
# Stores can override global token envs when each store uses separate secrets.
# api_token_env = "QPAYD_MAIN_API_TOKEN"
# admin_token_env = "QPAYD_MAIN_ADMIN_TOKEN"
# payout_token_env = "QPAYD_MAIN_PAYOUT_TOKEN"
invoice_expiry_minutes = 15
min_confirmations = 1
# public_allowed_origins = ["https://example.com"]
# admin_allowed_origins = ["https://admin.example.com"]

[stores.onchain]
network = "bitcoin"
descriptor_env = "QPAYD_MAIN_DESCRIPTOR"
# Add more trusted Electrum servers to enable deterministic rotation and fallback.
electrum_servers = ["ssl://electrum.blockstream.info:50002"]

[stores.lightning]
backend = "phoenixd"
url = "http://127.0.0.1:9740"
api_password_env = "PHOENIXD_LIMITED_PASSWORD"

# Barkd can be used instead of Phoenixd:
#
# [stores.lightning]
# backend = "barkd"
# url = "http://127.0.0.1:3000"
# api_password_env = "BARKD_AUTH_TOKEN"
#
# Get the token from barkd with:
# barkd --datadir /var/lib/barkd secret show

[stores.lightning_payout]
backend = "phoenixd"
url = "http://127.0.0.1:9740"
full_api_password_env = "PHOENIXD_FULL_PASSWORD"

[stores.lightning_payout.sweep]
destination_descriptor_env = "QPAYD_MAIN_TREASURY_DESCRIPTOR"
min_balance_sats = 100000
target_balance_sats = 25000
interval_seconds = 3600

# Barkd sweep uses the same shape:
#
# [stores.lightning_payout]
# backend = "barkd"
# url = "http://127.0.0.1:3000"
# full_api_password_env = "BARKD_SWEEP_AUTH_TOKEN"
#
# [stores.lightning_payout.sweep]
# destination_descriptor_env = "QPAYD_MAIN_TREASURY_DESCRIPTOR"
# min_balance_sats = 100000
# target_balance_sats = 25000
# interval_seconds = 3600

# Optional per-store payout configs for refund execution. Run `qpayd refunds`
# on the wallet host for a split receive/payout deployment.
#
# [stores.lightning_payout.refunds]
# enabled = true
# max_refund_sats = 100000
# daily_refund_limit_sats = 500000
# manual_approval_threshold_sats = 250000
# poll_seconds = 30
#
# [stores.bitcoin_payout]
# backend = "bitcoind"
# url = "http://127.0.0.1:8332"
# wallet = "refunds"
# rpc_auth_env = "BITCOIND_REFUND_RPC_AUTH"
#
# [stores.bitcoin_payout.refunds]
# enabled = true
# max_refund_sats = 100000
# daily_refund_limit_sats = 500000
# manual_approval_threshold_sats = 250000
# poll_seconds = 30