provider/.env.example at develop · daski-io/provider · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
# Daski minimal provider — Base Sepolia / Testnet template
# Copy to .env, replace every REPLACE_* value, and never commit .env.

NODE_ENV=development
PORT=4000
BASE_URL=https://REPLACE_WITH_YOUR_PUBLIC_PROVIDER_ORIGIN
GATEWAY_BASE_URL=https://REPLACE_WITH_DASKI_TESTNET_GATEWAY_ORIGIN
CHAIN_MODE=live

PROVIDER_NAME=REPLACE_WITH_YOUR_LEGAL_PROVIDER_NAME
PROVIDER_DESCRIPTION=REPLACE_WITH_A_SHORT_PUBLIC_DESCRIPTION
PROVIDER_WEBSITE_URL=https://REPLACE_WITH_YOUR_WEBSITE
PROVIDER_ICON_URL=https://REPLACE_WITH_YOUR_ICON
MARKETPLACE_TERMS_URL=https://REPLACE_WITH_DASKI_TERMS
MARKETPLACE_PRIVACY_URL=https://REPLACE_WITH_DASKI_PRIVACY_NOTICE
PROVIDER_TERMS_URL=https://REPLACE_WITH_YOUR_PROVIDER_TERMS
PROVIDER_PRIVACY_URL=https://REPLACE_WITH_YOUR_PRIVACY_NOTICE
SUPPORT_EMAIL=support@example.com
SUPPORT_RESPONSE_SLA=1 business day

# The database stores only replay/idempotency state, admitted public chain
# evidence, rate-limit buckets, terminal results, and optional supplier intent.
DATABASE_URL=postgresql://daski_provider:local-only-provider-password@127.0.0.1:55432/daski_provider
DATABASE_SSL_MODE=disable
# Production requires a separate schema owner and verify-full TLS:
# MIGRATION_DATABASE_URL=postgresql://schema_owner:REPLACE@db.example/provider
# DATABASE_CA_CERT=REPLACE_WITH_PEM_CONTENT

CHAIN_ID=84532
BASE_RPC_URL=https://sepolia.base.org
BASE_RPC_FALLBACK_URLS=
IDENTITY_REGISTRY_ADDRESS=0x8004A818BFB912233c491871b3d84c89A494BD9e
USDC_ADDRESS=0x036cbd53842c5426634e7929541ec2318f3dcf7e
PROVIDER_AGENT_ID=REPLACE_WITH_ERC_8004_AGENT_ID
PROVIDER_WALLET_PRIVATE_KEY=0xREPLACE_WITH_64_HEX_TESTNET_PRIVATE_KEY

# Daski issues/reviews this set during Testnet onboarding.
STANDARD_RAIL_ENVIRONMENT=testnet
STANDARD_RAIL_GATEWAY_SIGNER=0xREPLACE_WITH_GATEWAY_PROTOCOL_SIGNER
STANDARD_RAIL_GATEWAY_ORIGIN=https://REPLACE_WITH_DASKI_TESTNET_GATEWAY_ORIGIN
STANDARD_RAIL_GATEWAY_AUDIENCE=https://REPLACE_WITH_DASKI_TESTNET_GATEWAY_ORIGIN
STANDARD_RAIL_PROVIDER_AUDIENCE=https://REPLACE_WITH_YOUR_PUBLIC_PROVIDER_ORIGIN
REPUTATION_STORAGE_ADDRESS=0xREPLACE_WITH_REPUTATION_STORAGE
EAS_ADDRESS=0x4200000000000000000000000000000000000021
EAS_RUNTIME_CODE_HASH=0xREPLACE_WITH_64_HEX_RUNTIME_CODE_HASH
EAS_OUTCOME_SCHEMA_UID=0xREPLACE_WITH_64_HEX_SCHEMA_UID
SANCTIONS_ORACLE_ADDRESS=0xREPLACE_WITH_SANCTIONS_ORACLE
# Daski supplies both values with the reviewed runtime bundle. Keep the JSON
# byte-for-byte as issued; do not hand-edit signed policy envelopes.
STANDARD_RAIL_GLOBAL_POLICY_JSON=REPLACE_WITH_DASKI_ISSUED_GLOBAL_POLICY_JSON
STANDARD_RAIL_PROVIDER_CONTROL_PROFILE_HASH=0xREPLACE_WITH_64_HEX_CONTROL_PROFILE_HASH
STANDARD_RAIL_FINALITY_CONFIRMATIONS=12

# Independent secret used only to pseudonymize local rate-limit identities.
# Generate with: openssl rand -hex 32
RATE_LIMIT_HASH_KEY=REPLACE_WITH_AT_LEAST_32_HIGH_ENTROPY_CHARACTERS
RATE_LIMIT_BYPASS_IPS=
TRUST_PROXY_HOPS=0
TRUST_PROXY_CIDRS=
EDGE_RATE_LIMIT_VERIFIED=false

# Add product-specific credentials below. Parse them in
# src/services/<slug>/config.ts; never put them in manifests or docs.