# Apply --migrate separately using a schema-owner DATABASE_URL.
DATABASE_URL=postgres://billing_app:CHANGE_ME@127.0.0.1:5432/billing
TENANT_ID=example-tenant
ENCRYPTION_KEY=replace-with-a-high-entropy-field-encryption-key
# LEGACY_ENCRYPTION_KEYS=previous-key
HOST=127.0.0.1
PORT=8000
HMAC_SECRET_KEY=replace-with-a-service-secret
JWKS_PUBLIC_KEY_URL=https://iam.example.com/.well-known/jwks.json
# JWT_ISSUER=https://iam.example.com
# JWT_AUDIENCE=https://billing.example.com
BILLING_DATABASE_BACKUP=false
{{#stripe}}
# Your own Stripe key: STRIPE_API_KEY matches the TS billing registration and,
# when set, is used even if the managed gateway is also configured.
STRIPE_API_KEY=replace-with-a-secret-provider-key
# STRIPE_SECRET_KEY is also accepted for existing native deployments.
# Managed mode (optional): without a Stripe key, set all three to use the gateway.
# PLATFORM_GATEWAY_URL=https://platform.example.com
# INSTANCE_ID=replace-with-the-managed-instance-id
# Docker development only: permits the fixed http://gateway-mock:8080 endpoint.
# FORKLAUNCH_LOCAL_GATEWAY_MOCK=true
# Optional direct Stripe callbacks; absent secrets reject incoming deliveries.
# STRIPE_WEBHOOK_SECRET=whsec_replace-me
# Optional managed platform payment-event callbacks.
# INSTANCE_HMAC_KEY=replace-with-the-managed-instance-key
# Optional HTTPS API proxy; explicit loopback HTTP is accepted for fixtures.
# STRIPE_API_BASE=https://api.stripe.com
{{/stripe}}
RUST_LOG=info
# OTEL_EXPORTER_OTLP_ENDPOINT=http://127.0.0.1:4318
# OTEL_EXPORTER_OTLP_PROTOCOL=http/protobuf
# MCP shares PORT; set public hosts/origins explicitly behind a proxy.
MCP_ENABLED=true
MCP_PATH=/mcp
# MCP_ALLOWED_HOSTS=api.example.com
# MCP_ALLOWED_ORIGINS=https://app.example.com:443
# MCP uses the HTTP listener by default. For a separate listener:
# MCP_LISTENER=separate
# MCP_PORT=10000
# MCP_HOST=127.0.0.1
# Without MCP_PORT, separate mode uses the HTTP port + 2000.
# MCP_PATH=/mcp
# MCP_ENABLED=false
# Declared request dates: legacy or utc-iso-and-epoch; also used by artifact export.
BILLING_REQUEST_DATE_PROFILE=legacy