# Database
POSTGRES_USER=xmrcheckout
POSTGRES_PASSWORD=xmrcheckout
POSTGRES_DB=xmrcheckout
DATABASE_URL=postgresql://xmrcheckout:xmrcheckout@db:5432/xmrcheckout

# Optional: Postgres backups (used by the `db-backup` Compose profile)
BACKUP_RETENTION_DAYS=7

# API authentication
API_KEYS=dev-key-1
API_KEY_ENCRYPTION_KEY=replace-with-fernet-key
RATE_PROVIDER=kraken
INVOICE_RECONCILE_INTERVAL_SECONDS=30

# Founder donation wallet (view-only)
FOUNDER_PAYMENT_ADDRESS=
FOUNDER_VIEW_KEY=
DONATIONS_ENABLED=false

# Monero wallet RPC (view-only wallet generation + subaddresses)
MONERO_WALLET_RPC_URLS=http://wallet-rpc-reconciler-1:18083,http://wallet-rpc-reconciler-2:18083,http://wallet-rpc-reconciler-3:18083
MONERO_WALLET_RPC_USER=
MONERO_WALLET_RPC_PASSWORD=
MONERO_WALLET_RPC_WALLET_PASSWORD=
MONERO_WALLET_RPC_WALLET_DIR=/wallets

# Monero daemon
# - Default: uses a third-party daemon (low setup, external dependency)
# - Local: run the bundled `monerod` service and set MONERO_DAEMON_URL=http://monerod:18081
MONERO_DAEMON_URL=http://xmr-node.cakewallet.com:18081

# Admin panel (generate with: openssl rand -base64 32 | tr -d '=' | head -c 32)
ADMIN_API_KEY=

# Registration (set to false to require manual merchant onboarding)
OPEN_REGISTRATION=true

# Signup form (optional, only needed when OPEN_REGISTRATION=false)
# Cloudflare Turnstile - bot protection for signup form
TURNSTILE_SITE_KEY=
TURNSTILE_SECRET_KEY=
# Resend - email delivery for signup requests
RESEND_API_KEY=
CONTACT_EMAIL=sales@such.software

# UI
API_BASE_URL=http://api:8000
SITE_URL=https://example.com