# Production mode - enforces all security checks
ENVIRONMENT=production

# Service configuration
HOST=0.0.0.0
PORT=3000
HEALTH_PORT=3001
LOG_LEVEL=DEBUG

# TEE configuration
TEE_TYPE=TDX
ENCLAVE=true

# Executor identity

# Blockchain configuration
CHAIN_ID=784
TRUSTED_READ_RPC_URL=https://34.76.33.139
TRUSTED_READ_WS_URL=wss://34.76.33.139
RPC_CERT_HASH=0x4c4dddd5049e3ac027eaea752da1de68b291a3815e621cc80b2ad22962b4f74e

# Provider endpoints configure transports without selecting a provider.
PINATA_API_URL=https://api.pinata.cloud
PINATA_GATEWAY_URL=https://gateway.pinata.cloud/ipfs
IPFS_API_URL=
IPFS_GATEWAY_URL=

# Contract addresses (sourced from src/config/contracts.sh)
TEE_SERVICE_REGISTRY_CONTRACT_ADDRESS=0xf4495DC72143D44A93AB0ecE4d6D63a216b27839
ASYNC_JOB_TRACKER_CONTRACT_ADDRESS=0xf00385449fD961925A0B125F5f30b29B682D4bFb
SECRETS_ACCESS_CONTROL_CONTRACT_ADDRESS=0x0cEae62e2082829226eF5821Bb662483Db17A71F
AGENT_HEARTBEAT_CONTRACT_ADDRESS=0xDeeA4Df0C958966ED75570a05430BB0D4844a8cc
AGENT_IDENTITY_REGISTRY_CONTRACT_ADDRESS=0x2cbF50F833a3AEfb5c5B27068052cB5585F5c087

# Result submission
STREAMING_SUBMISSION=true
RESULT_SUBMISSION_INTERVAL=0.1
VALIDATOR_PREDICTION_UPDATE_INTERVAL=10

# Production security flags (enforced in production mode)
SKIP_ENDPOINT_VERIFICATION=false
JOB_PUSH_DEBUG=false
ALLOW_INSECURE_STREAMING=false
CONTAINER_MODE=compose
COMPOSE_PROJECT_NAME=ritual-container
CONTAINER_PULL_POLICY=always
CONTAINER_REGISTRY_AUTH=auto
RITUAL_ALLOWED_SECRETS=EXECUTOR_OPERATOR_TOKEN,CONTAINER_REGISTRY_USERNAME,CONTAINER_REGISTRY_PASSWORD,CLAW_SPAWNER_API_TOKEN,PAYMENT_ADDRESS,EXECUTOR_INDEX,SERVICE_ENDPOINT,MULTICAST_URLS,EXECUTOR_SERVICE_ROUTES_JSON
RITUAL_PUBLIC_LOGS=false
RITUAL_LOG_SERVER_PORT=8090
RITUAL_ENCRYPTED_STORAGE=required
RITUAL_ENCRYPTED_STORAGE_DEVICE=/dev/nvme0n2
RITUAL_ENCRYPTED_STORAGE_MAPPER=ritual_data
RITUAL_ENCRYPTED_STORAGE_MOUNT=/data
