# Production mode - enforces all security checks
ENVIRONMENT=production

# Service configuration
HOST=0.0.0.0
PORT=3000
HEALTH_PORT=3001
LOG_LEVEL=DEBUG

# TEE configuration
TEE_TYPE=TDX
ENCLAVE=true

# Executor identity
SERVICE_ENDPOINT=http://34.90.183.59:3000
EXECUTOR_INDEX=460

# Blockchain configuration
CHAIN_ID=784
TRUSTED_READ_RPC_URL=https://34.76.33.139
TRUSTED_READ_WS_URL=wss://34.76.33.139
RPC_CERT_HASH=0x4c4dddd5049e3ac027eaea752da1de68b291a3815e621cc80b2ad22962b4f74e
MULTICAST_URLS=http://34.76.33.139:8545,http://35.194.242.142:8545,http://34.150.111.50:8545,http://35.200.82.150:8545,http://34.64.223.253:8545,http://34.126.113.192:8545,http://35.198.109.151:8545,http://8.229.26.0:8545,http://34.24.211.238:8545,http://34.27.58.217:8545,http://34.93.103.8:8545,http://34.7.18.167:8545,http://34.47.187.208:8545,http://34.26.117.85:8545,http://34.179.183.215:8545,http://35.192.225.30:8545,http://8.229.89.134:8545,http://35.190.131.81:8545,http://136.119.186.28:8545,http://35.252.144.186:8545

# Provider endpoints configure transports without selecting a provider.
PINATA_API_URL=https://api.pinata.cloud
PINATA_GATEWAY_URL=https://gateway.pinata.cloud/ipfs
IPFS_API_URL=
IPFS_GATEWAY_URL=

# Contract addresses (sourced from src/config/contracts.sh)
TEE_SERVICE_REGISTRY_CONTRACT_ADDRESS=0xf4495DC72143D44A93AB0ecE4d6D63a216b27839
ASYNC_JOB_TRACKER_CONTRACT_ADDRESS=0xf00385449fD961925A0B125F5f30b29B682D4bFb
SECRETS_ACCESS_CONTROL_CONTRACT_ADDRESS=0x0cEae62e2082829226eF5821Bb662483Db17A71F
AGENT_HEARTBEAT_CONTRACT_ADDRESS=0xDeeA4Df0C958966ED75570a05430BB0D4844a8cc
AGENT_IDENTITY_REGISTRY_CONTRACT_ADDRESS=0x2cbF50F833a3AEfb5c5B27068052cB5585F5c087

# Result submission
STREAMING_SUBMISSION=true
RESULT_SUBMISSION_INTERVAL=0.1
VALIDATOR_PREDICTION_UPDATE_INTERVAL=10

# Production security flags (enforced in production mode)
SKIP_ENDPOINT_VERIFICATION=false
JOB_PUSH_DEBUG=false
ALLOW_INSECURE_STREAMING=false
PAYMENT_ADDRESS=0x486Ecc40E3dCfB1f970E9Ab956d6b2222FA7D90e
CONTAINER_MODE=compose
COMPOSE_PROJECT_NAME=ritual-prod-mainnet-http-eemshaven-460
CONTAINER_PULL_POLICY=always
CONTAINER_REGISTRY_AUTH=auto
RITUAL_ALLOWED_SECRETS=CONTAINER_REGISTRY_USERNAME,CONTAINER_REGISTRY_PASSWORD,CLAW_SPAWNER_API_TOKEN
RITUAL_PUBLIC_LOGS=false
RITUAL_LOG_SERVER_PORT=8090
RITUAL_ENCRYPTED_STORAGE=required
RITUAL_ENCRYPTED_STORAGE_DEVICE=/dev/nvme0n2
RITUAL_ENCRYPTED_STORAGE_MAPPER=ritual_data
RITUAL_ENCRYPTED_STORAGE_MOUNT=/data
