.env.example

# For defaults see: ./docker-compose.yml
# Create a .env file in the root of the project and add your environment variables there
LOG_LEVEL=debug
CONFIG_DIR=./config
CONFIG_FILE_NAME=config.json
WEBHOOK_SIGNING_KEY=<webhook_signing_key>
API_KEY=<api_key>
RATE_LIMIT_REQUESTS_PER_SECOND=100
RATE_LIMIT_BURST_SIZE=300
METRICS_ENABLED=false
REDIS_URL=redis://localhost:6379
# Optional reader endpoint for read-heavy Redis deployments
# REDIS_READER_URL=redis://localhost:6380
REDIS_CONNECTION_TIMEOUT_MS=10000
REDIS_KEY_PREFIX=oz-relayer

# Queue backend selection
# Supported: redis, sqs
QUEUE_BACKEND=redis

# SQS backend settings (required when QUEUE_BACKEND=sqs unless SQS_QUEUE_URL_PREFIX is provided)
# AWS_REGION=us-east-1
# AWS_ACCOUNT_ID=123456789012
# Optional: fully-qualified queue URL prefix; when set, AWS_ACCOUNT_ID is not required
# SQS_QUEUE_URL_PREFIX=https://sqs.us-east-1.amazonaws.com/123456789012/relayer-

# Enable distributed locking for cron/cleanup workers in multi-instance deployments
# Supported truthy values: true, 1
DISTRIBUTED_MODE=false

RPC_TIMEOUT_MS=10000
ENABLE_SWAGGER=false
KEYSTORE_PASSPHRASE=<keystore_passphrase> # This is the passphrase for the keystore file

# RPC URL Security (SSRF Protection)
# RPC_ALLOWED_HOSTS: Comma-separated list of allowed RPC hostnames/IPs (optional)
#   If non-empty, only URLs with these hosts are permitted
#   Example: RPC_ALLOWED_HOSTS=eth-mainnet.g.alchemy.com,mainnet.infura.io
# RPC_ALLOWED_HOSTS=

# RPC_BLOCK_PRIVATE_IPS: Block private IP addresses (RFC 1918, loopback, link-local) (default: false)
#   Set to "true" to prevent RPC URLs from targeting private networks
#   Note: Cloud metadata endpoints (169.254.169.254) are ALWAYS blocked
#   Example: RPC_BLOCK_PRIVATE_IPS=true
# RPC_BLOCK_PRIVATE_IPS=false