kalien/.dev.vars.example at main · kalepail/kalien · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
# Cloudflare Worker local overrides (`wrangler dev`)
# Copy to .dev.vars and fill in secrets before running locally.
#
# Non-secret vars (tuning, policy, contract IDs, network passphrase, etc.)
# live in wrangler.jsonc under "vars". Only secrets and local-dev overrides
# belong here.
#
# Core gateway/prover pacing limits are now code-level constants in
# worker/constants.ts and are not exposed as env vars anymore:
# - DEFAULT_MAX_TAPE_BYTES
# - DEFAULT_POLL_INTERVAL_MS
# - DEFAULT_PROVER_REQUEST_TIMEOUT_MS
# - DEFAULT_PROVER_HEALTH_CACHE_MS
# - DEFAULT_RELAYER_REQUEST_TIMEOUT_MS

# ── Secrets ────────────────────────────────────────────────────────────────
# These MUST be in .dev.vars for local dev (they are `wrangler secret` in prod).

RELAYER_API_KEY=

# Galexie / Lightsail API key (mainnet only — not needed on testnet).
# GALEXIE_API_KEY=

# ── Prover auth (optional) ────────────────────────────────────────────────
# Required for remote provers. For localhost/127.0.0.1 you may omit auth.
PROVER_API_KEY=
# Optional alternative auth for remote provers (must set both fields).
PROVER_ACCESS_CLIENT_ID=
PROVER_ACCESS_CLIENT_SECRET=
# Optional: reject proofs whose image_id doesn't match this 32-byte hex value.
# When unset, any image_id from the prover is accepted.
# PROVER_EXPECTED_IMAGE_ID=

# ── Boundless proving (alternative to PROVER_BASE_URL) ───────────────────
# When BOUNDLESS_RPC_URL is set in wrangler.jsonc "vars", the worker uses
# Boundless (RISC Zero's proof marketplace) instead of the self-hosted
# Vast.ai prover. Only the private key is a secret.
# Non-secret config (RPC URL, image URL/ID, pricing, poll intervals) lives
# in wrangler.jsonc "vars". Defaults target Base Mainnet (chain 8453).
# Set BOUNDLESS_CHAIN_ID in wrangler.jsonc to use a testnet instead.
# BOUNDLESS_PRIVATE_KEY=0x...
# BOUNDLESS_TOP_UP_BUFFER_BPS=1500

# ── IPFS (Pinata) ────────────────────────────────────────────────────────
# Used by Boundless to upload stdin input when inline data exceeds order
# stream limits (~3.4 KB). Also used for one-time ELF uploads.
# PINATA_JWT=

# ── Dev API ────────────────────────────────────────────────────────────────
# Guards dev-only leaderboard endpoints (reset, trigger-sync, seed).
# DEV_API_KEY=

# ── Local-dev overrides ───────────────────────────────────────────────────
# Uncomment to override wrangler.jsonc defaults for local development.

# PROVER_BASE_URL=http://localhost:8080
# ALLOW_INSECURE_PROVER_URL=1
# LEADERBOARD_SYNC_CRON_ENABLED=0
# STELLAR_RPC_URL=https://soroban-rpc.testnet.stellar.gateway.fm/
# SMART_ACCOUNT_INDEXER_URL=https://smart-account-indexer.sdf-ecosystem.workers.dev
# LEADERBOARD_TAPE_BACKFILL_INTERVAL_MINUTES=10
# LEADERBOARD_TAPE_STALE_PRUNE_INTERVAL_MINUTES=30

# ── Galexie (mainnet only) ────────────────────────────────────────────────
# On testnet, source mode "auto" resolves to RPC-only (no Galexie datastore
# available). These vars are only needed for mainnet deployments.
#
# GALEXIE_SOURCE_MODE=auto
# GALEXIE_API_BASE_URL=https://galexie-pro.lightsail.network
# Optional override: single URL or comma-separated priority list.
# When unset on mainnet, defaults are:
#   https://rpc-pro.lightsail.network,https://archive-rpc-pro.lightsail.network
# GALEXIE_RPC_BASE_URL=
# GALEXIE_SCORE_EVENTS_PATH=/events
# Optional: include events_api as last-resort fallback in auto/rpc mode.
# Default is disabled (0) because not all provider plans expose /events.
# GALEXIE_ENABLE_EVENTS_API_FALLBACK=0
# GALEXIE_DATASTORE_ROOT_PATH=/v1
# GALEXIE_DATASTORE_OBJECT_EXTENSION=zst
# GALEXIE_REQUEST_TIMEOUT_MS=20000