cdk-mintd 0.17.1

[info]
url = "https://mint.thesimplekid.dev/"
listen_host = "127.0.0.1"
listen_port = 8085
mnemonic = ""
# input_fee_ppk = 0
# enable_info_page = true

# Set keyset version preference.
# true = Force upgrade to V2 (Version01).
# false = Force downgrade to V1 (Version00).
# If unset (default), existing keysets are preserved, but new ones use V2.
# use_keyset_v2 = true

[info.quote_ttl]
# Prefer explicit fields over inline tables for readability and ease of overrides
mint_ttl = 600
melt_ttl = 120


[info.logging]
# Where to output logs: "stderr" (standard error stream), "file", or "both" (default: "both")
# output = "both"
# Log level for console output (default: "info")
# console_level = "info"  
# Log level for file output (default: "debug")
# file_level = "debug"

[mint_management_rpc]
enabled = false
# address = "127.0.0.1"
# port = 8086

#[prometheus]
#enabled = true
#address = "127.0.0.1"
#port = 9090
# 
[info.http_cache]
# memory or redis
backend = "memory"
ttl = 60
tti = 60
# `key_prefix` and `connection_string` required for redis
# key_prefix = "mintd"
# connection_string = "redis://localhost"

# For redis-cluster:
# use_cluster = true
# cluster_nodes = ["redis://node1:6379", "redis://node2:6379"]

# NOTE: If [mint_management_rpc] is enabled these values will only be used on first start up.
# Further changes must be made through the rpc.
[mint_info]
# name = "cdk-mintd mutiney net mint"
# Hex pubkey of mint
# pubkey = ""
# description = "These are not real sats for testing only"
# description_long = "A longer mint for testing"
# motd = "Hello world"
# icon_url = "https://this-is-a-mint-icon-url.com/icon.png"
# contact_email = "hello@cashu.me"
# Nostr pubkey of mint (Hex)
# contact_nostr_public_key = ""
# tos_url = "https://example.com/terms-of-service"


[database]
# Database engine (sqlite/postgres) defaults to sqlite
engine = "sqlite"

# PostgreSQL configuration (when engine = "postgres")
[database.postgres]
# PostgreSQL connection URL
# Can also be set via CDK_MINTD_POSTGRES_URL or CDK_MINTD_DATABASE_URL environment variables
# Environment variables take precedence over config file settings
url = "postgresql://user:password@localhost:5432/cdk_mint"
# TLS mode: "disable", "prefer", "require" (optional, defaults to "disable")
tls_mode = "disable"
# Maximum number of connections in the pool (optional, defaults to 20)
max_connections = 20
# Connection timeout in seconds (optional, defaults to 10)
connection_timeout_seconds = 10

# Auth database configuration (optional, only used when auth is enabled)
[auth_database.postgres]
# PostgreSQL connection URL for authentication database
# Can also be set via CDK_MINTD_AUTH_POSTGRES_URL environment variable
# Environment variables take precedence over config file settings
url = "postgresql://user:password@localhost:5432/cdk_mint_auth"
# TLS mode: "disable", "prefer", "require" (optional, defaults to "disable")
tls_mode = "disable"
# Maximum number of connections in the pool (optional, defaults to 20)
max_connections = 20
# Connection timeout in seconds (optional, defaults to 10)
connection_timeout_seconds = 10

# Lightning backends. Use [ln] for a single backend, or repeat [[ln]] for one
# backend per unit. Duplicate (unit, method) pairs are rejected at startup.
#   [[ln]]
#   ln_backend = "cln"
#   unit = "sat"
#   [[ln]]
#   ln_backend = "lnbits"
#   unit = "msat"
#
# Fake wallet multi-unit testing uses one fakewallet [[ln]] entry per unit:
#   [[ln]]
#   ln_backend = "fakewallet"
#   unit = "sat"
#   [[ln]]
#   ln_backend = "fakewallet"
#   unit = "usd"

[ln]
# Required ln backend `cln`, `lnd`, `fakewallet`, 'lnbits', 'ldknode' or 'none' (if onchain is enabled)
# NOTE: fakewallet is isolated testing mode and cannot be mixed with real payment backends.
ln_backend = "fakewallet"
# unit = "sat"          # Optional, defaults to "sat"
# min_mint=1
# max_mint=500000
# min_melt=1
# max_melt=500000

[onchain]
# Required onchain backend `bdk`, `fakewallet`, or `none`.
# If `ln_backend` is set to `none`, `onchain_backend` MUST be set to a valid backend (e.g., `bdk`).
# Use `fakewallet` with `ln_backend = "fakewallet"` for fully fake rails, or with
# `ln_backend = "none"` for fake onchain-only testing.
onchain_backend = "fakewallet"
# min_mint=1000
# max_mint=1000000
# min_melt=1000
# max_melt=1000000

# [bdk]
# mnemonic = "your twelve or twenty-four word mnemonic phrase here"
# network = "regtest"  # REQUIRED: mainnet, testnet, signet, regtest (no default)
# num_confs = 3        # Number of confirmations required (must be >= 1; 0 is rejected)
# min_receive_amount_sat = 1000  # Minimum inbound amount that counts toward minting
# min_send_amount_sat = 546      # Minimum outbound melt/send amount (must be >= 1)
# chain_source_type = "bitcoinrpc"  # esplora, bitcoinrpc
#
# # Bitcoin RPC configuration (when chain_source_type = "bitcoinrpc")
# # If omitted, defaults to 127.0.0.1:18443 with user/pass
# # bitcoind_rpc_host = "127.0.0.1"
# # bitcoind_rpc_port = 18443
# # bitcoind_rpc_user = "user"
# # bitcoind_rpc_password = "pass"
#
# # Esplora configuration (when chain_source_type = "esplora")
# # esplora_url = "https://mutinynet.com/api"
# # Keep low for public Esplora servers to avoid rate limits.
# # esplora_parallel_requests = 1
#
# # === Onchain batch + fee-estimation config (BDK) ===
# #
# # Outgoing melts are batched into a single on-chain transaction per tier.
# # Quotes are issued *before* BDK builds the final transaction, so the
# # reserved fee is an upper-bound estimate. Any excess is returned to the
# # wallet as change in the melt flow. The defaults intentionally
# # over-reserve to avoid under-quoting (which would fail the melt at
# # broadcast time).
# #
# # At low fee rates (e.g. ~1 sat/vB on testnet/signet/regtest), the fixed
# # safety margin dominates the reserve. For a 1000-sat P2WPKH melt at
# # ~1 sat/vB, the actual paid fee is typically ~140-280 sats while the
# # default reserve quotes ~700-900 sats. Operators running on low-fee
# # networks should lower `quote_fixed_safety_sat` and
# # `quote_safety_multiplier`; the defaults are tuned for mainnet where
# # fee-rate spikes between quote and broadcast are common.
# #
# # Every field below has a matching CDK_MINTD_BDK_* env-var override; see
# # crates/cdk-mintd/src/env_vars/bdk.rs.
# # [bdk.batch_config]
# # By default only Immediate is exposed. Uncomment and choose any subset of
# # the existing tiers to expose more fee options; order defines fee_index.
# # Warning: Standard and Economy delay transaction construction so more
# # melts can share one on-chain transaction. On mints without high melt
# # volume, delayed batching increases the chance that a quote fails at
# # consumption time because fee conditions or available coins changed
# # before broadcast. Low-volume mints should keep Immediate only.
# # fee_options = ["immediate", "standard", "economy"]
# #
# # # --- Batching cadence ---
# # poll_interval_secs = 30           # batch processor wake/check interval
# # max_batch_size = 50               # max intents per batch transaction
# # target_block_time_secs = 600      # maps advertised blocks to default wait time
# # standard_deadline_secs = 3600     # optional override; default is 6 blocks * target_block_time_secs
# # economy_deadline_secs = 86400     # optional override; default is 144 blocks * target_block_time_secs
# #
# # # --- Fee-rate sourcing ---
# # fee_fallback_sat_per_vb = 2.0     # used only if chain source errors
# # fee_cache_ttl_secs = 60           # how long to reuse a tier's rate
# #
# # # --- Quote-time safety margins ---
# # quote_max_input_count = 24        # cap on inputs reserved in the vbyte estimate
# # quote_fixed_safety_sat = 500      # flat sats added after the raw fee estimate
# # quote_safety_multiplier = 1.25    # multiplicative padding on the raw estimate
# #
# # Example overrides for low-fee networks (signet / testnet / regtest):
# # quote_fixed_safety_sat = 100
# # quote_safety_multiplier = 1.10
# #
# # Note: a few input-weight heuristics in crates/cdk-bdk/src/fee.rs
# # (QUOTE_INPUT_VBYTES, the +1 padding input) are hard-coded and cannot be
# # tuned via config. They contribute a smaller but non-zero over-estimate.

# [cln]
# rpc_path = "/path/to/.lightning/bitcoin/lightning-rpc"
# bolt12 = true              # Optional, defaults to true
# expose_private_channels = false  # Optional, defaults to false. Include private channel route hints in bolt11 invoices.
# fee_percent = 0.02         # Optional, defaults to 2%
# reserve_fee_min = 2        # Optional, defaults to 2 sats

# [lnbits]
# admin_api_key = ""
# invoice_api_key = ""
# lnbits_api = ""
# fee_percent = 0.02         # Optional, defaults to 2%
# reserve_fee_min = 2        # Optional, defaults to 2 sats
# Note: Only LNBits v1 API is supported (websocket-based)

# [lnd]
# address = "https://localhost:10009"
# cert_file = "/path/to/.lnd/tls.cert"
# macaroon_file = "/path/to/.lnd/data/chain/bitcoin/mainnet/admin.macaroon"
# fee_percent = 0.02         # Optional, defaults to 2%
# reserve_fee_min = 2        # Optional, defaults to 2 sats

# [ldk_node]
# fee_percent = 0.02         # Optional, defaults to 2%
# reserve_fee_min = 2        # Optional, defaults to 2 sats
# bitcoin_network = "signet"  # REQUIRED: mainnet, testnet, signet, regtest (no default)
# chain_source_type = "esplora"  # esplora, bitcoinrpc  
# 
# # IMPORTANT: LDK Node Seed Configuration
# # For NEW nodes: ldk_node_mnemonic MUST be set. This is the BIP39 mnemonic used to derive
# # the LDK node's keys. Keep this secure and backed up!
# # For EXISTING nodes: If omitted, the node will use its stored seed from the storage directory.
# # This maintains backward compatibility with nodes created before this configuration was added.
# ldk_node_mnemonic = "your twelve or twenty-four word mnemonic phrase here"
# 
# # Mutinynet configuration (recommended for testing)
# esplora_url = "https://mutinynet.com/api"
# gossip_source_type = "rgs"  # Use RGS for better performance
# rgs_url = "https://rgs.mutinynet.com/snapshot/0"
# storage_dir_path = "~/.cdk-ldk-node/mutinynet"
# log_dir_path = ".cdk-ldk-node/ldk-node/ldk_node.log"

# 
# # Testnet configuration
# # bitcoin_network = "testnet"
# # esplora_url = "https://blockstream.info/testnet/api"
# # rgs_url = "https://rapidsync.lightningdevkit.org/snapshot"
# # storage_dir_path = "~/.cdk-ldk-node/testnet"
# 
# # Mainnet configuration (CAUTION: Real Bitcoin!)
# # bitcoin_network = "mainnet"
# # esplora_url = "https://blockstream.info/api"  
# # rgs_url = "https://rapidsync.lightningdevkit.org/snapshot"
# # storage_dir_path = "~/.cdk-ldk-node/mainnet"
# 
# # Bitcoin RPC configuration (when chain_source_type = "bitcoinrpc")
# bitcoind_rpc_host = "127.0.0.1"
# bitcoind_rpc_port = 18443
# bitcoind_rpc_user = "testuser" 
# bitcoind_rpc_password = "testpass"
# 
# # Node configuration
# ldk_node_host = "127.0.0.1"
# ldk_node_port = 8090

# 
# # Gossip source configuration  
# gossip_source_type = "p2p"  # p2p (direct peer-to-peer) or rgs (rapid gossip sync)
# 
# # Webserver configuration for LDK node management interface
# webserver_host = "127.0.0.1"  # Default: 127.0.0.1
# webserver_port = 0  # 0 = auto-assign available port

[fake_wallet]
fee_percent = 0.02
reserve_fee_min = 1
# Custom payment methods advertised by the fake wallet.
# Each table entry scopes a method to one unit.
custom_payment_methods = [
    { method = "paypal", unit = "sat" },
    { method = "venmo", unit = "usd" },
]
# Bare method names are enabled for every supported unit:
# custom_payment_methods = ["paypal"]
#
# Set to [] to disable fake custom methods:
# custom_payment_methods = []
min_delay_time = 1
max_delay_time = 3

# Optional keyset rotations to create inactive/expired test keysets
# Each rotation creates a keyset that gets rotated out during mint build
# unit: currency unit (e.g. "sat", "usd")
# version: "v1" (Version00) or "v2" (Version01)
# input_fee_ppk: input fee in parts per thousand (default: 0)
# expired: if true, keyset is created with a past expiry timestamp (default: false)
#
# [[fake_wallet.keyset_rotations]]
# unit = "sat"
# version = "v1"
# input_fee_ppk = 0
# expired = true
#
# [[fake_wallet.keyset_rotations]]
# unit = "sat"
# version = "v2"
# input_fee_ppk = 0
# expired = false

# [grpc_processor]
# gRPC Payment Processor configuration
# addr = "127.0.0.1"
# port = 50051
# tls_dir = "/path/to/tls"
# 
# Note: To support custom payment methods (e.g., paypal, venmo, cashapp),
# your gRPC payment processor should return them in the `custom` field of 
# the get_settings() response. The mint will automatically create routes
# for these methods (e.g., /v1/mint/quote/paypal, /v1/mint/paypal, etc.)

# [auth]
# Set to true to enable authentication features (defaults to false)
# auth_enabled = false
# openid_discovery = "http://127.0.0.1:8080/realms/cdk-test-realm/.well-known/openid-configuration"
# openid_client_id = "cashu-client"
# mint_max_bat=50

# Authentication settings for endpoints
# Options: "clear", "blind", "none" (none = disabled)

# mint = "blind"
# get_mint_quote = "none"  
# check_mint_quote = "none"

# melt = "none"
# get_melt_quote = "none"
# check_melt_quote = "none"

# swap = "blind"
# restore = "blind"
# check_proof_state = "none"

# Transaction limits for DoS protection (optional, defaults shown)
[limits]
# Maximum number of inputs allowed per transaction (swap/melt)
max_inputs = 1000
# Maximum number of outputs allowed per transaction (mint/swap/melt)
max_outputs = 1000