Smoker/.env.example at master · Jayesh-Dev21/Smoker · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
# Smoker — Environment Variables
# Copy this to .env and fill in your values

# =============================================================================
# BACKEND
# =============================================================================
# Port for the Elysia API server
PORT=3001

# Bind address for the API server
HOST=0.0.0.0

# =============================================================================
# FRONTEND
# =============================================================================
# URL the frontend uses to reach the backend API
# Local: http://localhost:3001
# Docker: http://backend:3001
NEXT_PUBLIC_API_URL=http://localhost:3001

# =============================================================================
# ETHEREUM
# =============================================================================

# RPC endpoint to connect to Ethereum
# Local (Anvil): http://localhost:8545
# Docker: http://anvil:8545
# Testnet (Sepolia via Alchemy): https://eth-sepolia.g.alchemy.com/v2/YOUR_KEY
# Testnet (Sepolia via Infura): https://sepolia.infura.io/v3/YOUR_PROJECT_ID
# Mainnet (Alchemy): https://eth-mainnet.g.alchemy.com/v2/YOUR_KEY
# Mainnet (Infura): https://mainnet.infura.io/v3/YOUR_PROJECT_ID
ETH_RPC_URL=http://localhost:8545

# Private key for signing transactions (DEPLOYER WALLET)
# ⚠️ NEVER commit real private keys to git
# Generate a new one: cast wallet new
# Anvil default: 0xac0974bec39a17e36ba4a6b4d238ff944bacb478cbed5efcae784d7bf4f2ff80
# MetaMask: Account Details > Show Private Key
ETH_PRIVATE_KEY=

# Address of the deployed SmokerVerifier contract
# After first deploy, the contract address is printed in the deploy logs
# Or check: http://localhost:3002 (dashboard) after deployment
CONTRACT_ADDRESS=

# =============================================================================
# SIGSTORE (for provenance verification)
# =============================================================================
# Fulcio — issues short-lived signing certificates (public, no key needed)
SIGSTORE_FULCIO_URL=https://fulcio.sigstore.dev

# Rekor — transparency log for attestation records (public, no key needed)
SIGSTORE_REKOR_URL=https://rekor.sigstore.dev

# TSA — timestamp authority for signing timestamps (public, no key needed)
SIGSTORE_TSA_URL=http://timestamp.sigstore.dev

# =============================================================================
# SCANNING
# =============================================================================

# Timeout per scan in milliseconds
SCAN_TIMEOUT=30000

# Maximum concurrent scans
MAX_CONCURRENT_SCANS=10