.env.example

NODE_ENV=development
PORT=8080
ROUTING_PREFIX=
SERVER_PRIVATE_KEY=your-hex-private-key-here

# Storage backend: sql or mongo
STORAGE_BACKEND=sql

# SQL backend (STORAGE_BACKEND=sql)
DB_DRIVER=sqlite3
DB_SOURCE=messagebox.db
# DB_DRIVER=postgres
# DB_SOURCE=postgres://user:password@localhost:5432/messagebox?sslmode=disable

# Mongo backend (STORAGE_BACKEND=mongo)
# MONGO_URI=mongodb://localhost:27017
# MONGO_DATABASE=messagebox

BSV_NETWORK=mainnet
ENABLE_WEBSOCKETS=false
# WALLET_STORAGE_URL=
# FIREBASE_PROJECT_ID=
# FIREBASE_SERVICE_ACCOUNT_JSON=

# Paymail profile lookup (feature off when PAYMAIL_DOMAIN is empty; requires STORAGE_BACKEND=mongo)
# PAYMAIL_DOMAIN is a bare domain such as example.com (no scheme, port or path).
# ADMIN_IDENTITY_KEYS is a comma list of 66-character compressed pubkey hex.
PAYMAIL_DOMAIN=
PAYMAIL_HOST=
HANDLE_COOLDOWN_DAYS=30
ADMIN_IDENTITY_KEYS=
LOOKUP_RATE_PER_MIN=60
TRUST_PROXY=false
# TRUSTED_PROXY_HOPS is how many proxies of your own sit in front of this
# process; only read when TRUST_PROXY=true.
TRUSTED_PROXY_HOPS=1
# CLIENT_IP_HEADER names a single-valued header a proxy sets to the real
# client address (e.g. CF-Connecting-IP behind Cloudflare); it must be a
# syntactically valid HTTP header field name. It wins over TRUST_PROXY/
# TRUSTED_PROXY_HOPS whenever present exactly once and parseable as an IP,
# and falls back to that logic otherwise. Only set this once the origin is
# reachable exclusively through the proxy that sets the header: anything that
# can reach this process directly can send a fresh value per request, and a
# fresh value is a fresh bucket, so it escapes the limit entirely — weaker
# than leaving this unset. It is not an authentication signal.
# CLIENT_IP_HEADER=CF-Connecting-IP