node/.env.example at testnet · kynesyslabs/node · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
TWITTER_USERNAME=
TWITTER_PASSWORD=
TWITTER_EMAIL=

GITHUB_TOKEN=

DISCORD_API_URL=
DISCORD_BOT_TOKEN=

GITHUB_CLIENT_ID=
GITHUB_CLIENT_SECRET=

HUMAN_PASSPORT_API_URL=https://api.passport.xyz
HUMAN_PASSPORT_API_KEY=
HUMAN_PASSPORT_SCORER_ID=

# ===========================================
# L2PS (Layer 2 Private System) Configuration
# ===========================================

# Batch Aggregator Settings
L2PS_AGGREGATION_INTERVAL_MS=10000
L2PS_MIN_BATCH_SIZE=1
L2PS_MAX_BATCH_SIZE=10
L2PS_CLEANUP_AGE_MS=300000

# ZK Proof Settings
L2PS_ZK_ENABLED=true

# Hash Service Settings
L2PS_HASH_INTERVAL_MS=5000

# ===========================================
# OmniProtocol TCP Server Configuration
# ===========================================
OMNI_ENABLED=false
OMNI_PORT=3001
OMNI_MODE=OMNI_ONLY
OMNI_FATAL=false

# OmniProtocol TLS Encryption
OMNI_TLS_ENABLED=false
OMNI_TLS_MODE=self-signed
OMNI_CERT_PATH=./certs/node-cert.pem
OMNI_KEY_PATH=./certs/node-key.pem
OMNI_CA_PATH=
OMNI_TLS_MIN_VERSION=TLSv1.3

# OmniProtocol Rate Limiting
OMNI_RATE_LIMIT_ENABLED=true
OMNI_MAX_CONNECTIONS_PER_IP=10
OMNI_MAX_REQUESTS_PER_SECOND_PER_IP=100
OMNI_MAX_REQUESTS_PER_SECOND_PER_IDENTITY=200

# HTTP Server Rate Limiting Whitelist
# Comma-separated list of IPs to bypass rate limiting
WHITELISTED_IPS=
# Comma-separated list of hex public keys to bypass rate limiting
# These keys must provide valid signature in request headers
WHITELISTED_KEYS=

# Prometheus Metrics (optional - enabled by default)
# Exposes metrics at http://localhost:<METRICS_PORT>/metrics for Prometheus scraping
# Note: This is the NODE's metrics endpoint, not the Prometheus server port.
# The monitoring stack's Prometheus server runs on port 9091 (see monitoring/docker-compose.yml)
METRICS_ENABLED=true
METRICS_PORT=9090
METRICS_HOST=0.0.0.0

# ===========================================
# TLSNotary HTTPS Attestation Configuration
# ===========================================
TLSNOTARY_ENABLED=false
TLSNOTARY_PORT=7047
TLSNOTARY_SIGNING_KEY=
TLSNOTARY_PROXY_PORT=55688
TLSNOTARY_MAX_SENT_DATA=16384
TLSNOTARY_MAX_RECV_DATA=65536

# ZK Identity System Configuration
# Points awarded for each successful ZK attestation (default: 10)
ZK_ATTESTATION_POINTS=10