# Copy this template to .env in the PRIVATE application root, outside public_html.
# Never upload a completed .env to dist/client, public, Git, or the public archive.
# cPanel environment variables override .env values. No private keys are bundled.
NODE_ENV=production
APP_URL=https://app.rwatokenizationplatform.com
ADMIN_URL=https://adpanel.rwatokenizationplatform.com

# Required: the same Supabase project used by the administration panel.
SUPABASE_URL=
SUPABASE_PUBLISHABLE_KEY=

# Optional privileged operations only. Never expose with VITE_ / NEXT_PUBLIC_.
SUPABASE_SERVICE_ROLE_KEY=

# Existing scoped username directory service, needed for username-based sign-in.
AUTH_DIRECTORY_URL=
AUTH_DIRECTORY_TOKEN=

# Disable all localhost preview / registration bypasses on the public website.
PLANCK_PREVIEW=false
PLANCK_REGISTRATION_TEST=false
PLANCK_REGISTRATION_TEST_SKIP_OTP=false
PLANCK_REGISTRATION_TEST_UNTIL=
SANDBOX_REGISTRATION_TOKEN=

# Integrated assistant: no second server is needed. Choose an available model.
# Without a key/model, approved public reference answers remain available.
OPENAI_API_KEY=
OPENAI_MODEL=gpt-4.1-mini
OPENAI_TIMEOUT_MS=15000

# Optional Reown project ID; authorize the production domain in Reown first.
WALLETCONNECT_PROJECT_ID=

# TCARTT credentials and enablement are managed in administration integrations.
TCARTT_ALLOWED_ORIGINS=https://app.rwatokenizationplatform.com

# Optional scoped audit ingestion token. Never substitute a service-role key.
LOGIN_AUDIT_INGEST_TOKEN=
# Leave blank on cPanel. "cloudflare" requires request.cf, not just proxied DNS.
LOGIN_CONTEXT_PLATFORM=

# Real custody provisioning only; leave blank until configured and verified.
# Provisioning an address does not enable chain monitoring, credit, or withdrawal.
PLANCK_WALLET_PROVISION_URL=
PLANCK_WALLET_PROVISION_TOKEN=
PLANCK_WALLET_PROVIDER=
PLANCK_WALLET_CHAIN_ID=
PLANCK_WALLET_NETWORK=

# Optional issuance worker; private configuration for an existing chain deployment.
TOKENIZATION_WORKER_SECRET=
TOKENIZATION_ISSUANCE_CONFIG=

# PORT/HOST are normally supplied by the hosting platform. Do not override its port.
# For a standalone process without Passenger only:
# HOST=127.0.0.1
# PORT=3000

# These three variables belong to SUPABASE EDGE FUNCTIONS, not this Node process:
# WALLET_ALLOWED_ORIGINS=https://app.rwatokenizationplatform.com
# BALE_ALLOWED_ORIGINS=https://app.rwatokenizationplatform.com,https://adpanel.rwatokenizationplatform.com
# USDT_ALLOWED_ORIGINS=https://app.rwatokenizationplatform.com,https://adpanel.rwatokenizationplatform.com