# OpenVibe.Domains — environment (production: /etc/openvibe/domains.env). Names only; never commit values.

NODE_ENV=production
PORT=5070
HOST=127.0.0.1
BASE_URL=https://openvibe.domains
TRUST_PROXY=2

# The two public services this front reads. Both fall back to the internal origin in the pinned
# openvibe-contracts manifest; Tools has https://openvibe.tools if its manifest ever loses one.
# OV_HOST_INTERNAL_URL=http://127.0.0.1:4910
# OV_TOOLS_INTERNAL_URL=http://127.0.0.1:4001

# The shared per-IP budget for /api/v1 and /search, and the data clients' timeout.
# DOMAINS_RATE_LIMIT_PER_MIN=120
# DOMAINS_UPSTREAM_TIMEOUT_MS=8000

# ── The control panel (DOM-2): its database and sign-in with OpenVibe.Network ──
# DATABASE_URL serves (PgBouncer), DATABASE_DIRECT_URL migrates (owner role); unset in development = PGlite in data/.
DATABASE_URL=
DATABASE_DIRECT_URL=
OV_NETWORK_URL=https://openvibe.network
OV_NETWORK_INTERNAL_URL=http://127.0.0.1:4000
# OAuth client `domains` (written by Network's service-principal.js --write-env; never commit a value)
OV_OAUTH_CLIENT_ID=domains
OV_OAUTH_CLIENT_SECRET=
# OpenVibe.Events → POST /internal/events (account export and deletion); 32+ characters, comma-separated to rotate
DOMAINS_EVENTS_SECRET=
EVENTS_URL=http://127.0.0.1:4300

# Registrar keys (D11 owner settings): the admin panel's domains.registrars namespace wins; these are
# the fallback when no value was entered there.
#CLOUDFLARE_API_TOKEN=
#PORKBUN_API_KEY=
#PORKBUN_SECRET_API_KEY=