meridian/.env.example at main · CodlithLab/meridian · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
# API
PORT=3001
ALLOWED_ORIGIN=http://localhost:3000
STELLAR_NETWORK=testnet

# DeFindex vault contract address (C-address). Leave empty to disable DeFindex; only Blend positions are returned.
DEFINDEX_VAULT_ID=

# Upstash Redis (required in production for distributed rate limiting).
# Get these from your Upstash console: https://console.upstash.com
# Vercel serverless functions use the REST API:
UPSTASH_REDIS_REST_URL=
UPSTASH_REDIS_REST_TOKEN=
# Fastify API server uses the Redis protocol (ioredis). Format: rediss://default:TOKEN@HOST:PORT
REDIS_URL=

# Scheduled Blend accrue keeper. Store real values in Vercel/project secrets,
# not in source control. Vercel Cron calls include Authorization: Bearer CRON_SECRET.
# CRON_SECRET also gates the migration keeper below (same Vercel Cron caller).
CRON_SECRET=
MERIDIAN_KEEPER_SECRET_KEY=
MERIDIAN_KEEPER_MAX_ATTEMPTS=3
MERIDIAN_KEEPER_RETRY_BASE_DELAY_MS=1000
MERIDIAN_KEEPER_RPC_TIMEOUT_MS=10000
# Optional: how long keeper submission state is retained, in milliseconds.
MERIDIAN_KEEPER_SUBMISSION_TTL_MS=360000
# Optional webhook URL the alert keeper POSTs alerts to. Leave empty to disable webhook delivery.
MERIDIAN_ALERT_WEBHOOK_URL=

# Scheduled migrate_adapter keeper (#469). This key must be the vault's
# actual admin address, unlike MERIDIAN_KEEPER_SECRET_KEY above (accrue() is
# permissionless), migrate_adapter is admin-gated, so this key carries full
# vault admin authority. Keep it separate from the accrue keeper's key.
MERIDIAN_MIGRATION_KEEPER_SECRET_KEY=
# Never set to 10000 (unlimited slippage); the config loader rejects it.
MERIDIAN_MIGRATION_MAX_SLIPPAGE_BPS=100
MERIDIAN_MIGRATION_MIN_IMPROVEMENT_BPS=50
# Candidate adapter contract addresses the keeper may migrate the vault to,
# one var per protocol: MERIDIAN_ADAPTER_<PROTOCOL>_ID=<adapter C-address>.
# Deliberately not a fixed list, a new protocol is a new env var, never a
# code change (migrate_adapter itself has no notion of protocol either, it
# just takes an address). Leave unset to exclude a protocol from
# consideration. Real rate comparison is implemented for both protocols
# (packages/stellar-sdk-helpers/src/rate-sources.ts): Blend prices
# immediately; DeFindex needs a second, time-separated share-price sample
# per pool before it can report a rate, persisted via UPSTASH_REDIS_REST_URL
# / UPSTASH_REDIS_REST_TOKEN above (falls back to an in-memory, per-process
# store that is not durable across serverless invocations when those aren't
# set). The live testnet vault was redeployed with migrate_adapter present
# and confirmed callable (see apps/docs/operations/migration-keeper.md,
# #514, closed); nothing has actually exercised a real end-to-end migration
# against it yet, but these vars are no longer blocked on a missing entry
# point.
MERIDIAN_ADAPTER_BLEND_ID=
MERIDIAN_ADAPTER_DEFINDEX_ID=

# Web
VITE_API_URL=http://localhost:3001
# Optional override for Blend's testnet faucet endpoint. Leave empty to use the default.
VITE_BLEND_FAUCET_URL=
# Comma-separated Stellar public keys allowed onto /admin. Client-side only —
# a placeholder gate until #614 lands a real one; do not treat this as
# access control for anything sensitive (see AdminDashboard.tsx).
VITE_ADMIN_ADDRESSES=