.env.example

# ── LightningMate configuration ───────────────────────────────────────────────
# Copy this file to `.env` and fill in your node's values. Never commit `.env`.

# LND gRPC host:port. On Umbrel typically umbrel.local:10009 (Tor/LAN) or the
# container host lnd:10009 when LightningMate runs on the Umbrel itself.
LND_SOCKET=umbrel.local:10009

# --- Option A: paste base64-encoded values (recommended) ----------------------
# base64 -w0 .../tls.cert
LND_CERT=
# base64 -w0 .../data/chain/bitcoin/mainnet/readonly.macaroon  (READ-ONLY!)
LND_MACAROON=

# --- Option B: point to files instead of pasting base64 -----------------------
# LND_CERT_PATH=/data/.lnd/tls.cert
# LND_MACAROON_PATH=/data/.lnd/data/chain/bitcoin/mainnet/readonly.macaroon

# Backend HTTP port
PORT=3001

# Interface to bind. Default 127.0.0.1 = reachable only from this machine (safe
# for standalone, where no login is set). On Umbrel the app binds 0.0.0.0 and the
# API requires the per-app password Umbrel injects (APP_PASSWORD / APP_SEED, set
# by the compose); app_proxy sits in front too.
# LM_BIND=127.0.0.1

# Optional Host-header allowlist (comma-separated) to defend against DNS
# rebinding. Leave empty to disable. e.g. LM_ALLOWED_HOSTS=umbrel.local
# LM_ALLOWED_HOSTS=

# How far back to pull forwarding history for flow stats, in days
FLOW_WINDOW_DAYS=30

# ── Writes (fee apply + autopilot) — OFF by default ───────────────────────────
# Everything above is read-only. To let LightningMate APPLY fee changes, opt in
# here AND provide a macaroon with offchain:write (the admin macaroon works).
# LM_ENABLE_WRITE=true
# LND_WRITE_MACAROON=          # base64 of admin.macaroon, OR:
# LND_WRITE_MACAROON_PATH=/data/.lnd/data/chain/bitcoin/mainnet/admin.macaroon
# On Umbrel the admin macaroon is auto-discovered from the mounted data dir.

# Where autopilot config/history is stored (defaults to <repo>/.data standalone,
# /data on Umbrel).
# DATA_DIR=/data