Add master secrets reference and .env.master.example; gitignore .env.master

Co-authored-by: Cursor <cursoragent@cursor.com>

.env.master.example

@@ -0,0 +1,198 @@
+# ============================================================================
+# Master Secrets Template — ALL keys used across the workspace
+# ============================================================================
+# Copy to .env (repo root) or .env.master (local only). Fill values; NEVER commit.
+# See: docs/04-configuration/MASTER_SECRETS.md for where each is used.
+# ============================================================================
+
+# --- Proxmox ---
+PROXMOX_ML110=
+PROXMOX_R630_01=
+PROXMOX_R630_02=
+PROXMOX_HOST=
+PROXMOX_PORT=
+PROXMOX_USER=
+PROXMOX_TOKEN_NAME=
+PROXMOX_TOKEN_VALUE=
+PROXMOX_ALLOW_ELEVATED=
+
+# --- Cloudflare ---
+CLOUDFLARE_API_TOKEN=
+CLOUDFLARE_EMAIL=
+CLOUDFLARE_API_KEY=
+CLOUDFLARE_ZONE_ID=
+CLOUDFLARE_ZONE_ID_D_BIS_ORG=
+CLOUDFLARE_ZONE_ID_MIM4U_ORG=
+CLOUDFLARE_ZONE_ID_SANKOFA_NEXUS=
+CLOUDFLARE_ZONE_ID_DEFI_ORACLE_IO=
+CLOUDFLARE_TUNNEL_TOKEN=
+CLOUDFLARE_TUNNEL_ID=
+CLOUDFLARE_TUNNEL_ID_ALLTRA_HYBX=
+CLOUDFLARE_TUNNEL_ID_MIFOS_R630_02=
+CLOUDFLARE_TUNNEL_TOKEN_MIFOS_R630_02=
+CLOUDFLARE_ORIGIN_CA_KEY=
+CLOUDFLARE_ACCOUNT_ID=
+
+# --- ClouDNS ---
+CLOUDNS_AUTH_ID=
+CLOUDNS_AUTH_PASSWORD=
+
+# --- NPM / NPMplus ---
+NPM_URL=
+NPM_EMAIL=
+NPM_PASSWORD=
+NPM_HOST=
+NPM_PROXMOX_HOST=
+NPMPLUS_HOST=
+NPM_VMID=
+NPMPLUS_VMID=
+NPMPLUS_ALLTRA_HYBX_VMID=
+IP_NPMPLUS_ALLTRA_HYBX=
+NPM_URL_MIFOS=
+
+# --- Fastly ---
+FASTLY_API_TOKEN=
+
+# --- Network / UniFi / Omada ---
+PUBLIC_IP=
+PROXMOX_HOST_FOR_TEST=
+UNIFI_UDM_URL=
+UNIFI_API_KEY=
+UNIFI_API_MODE=
+UNIFI_SITE_ID=
+UNIFI_VERIFY_SSL=
+OMADA_API_KEY=
+OMADA_CLIENT_SECRET=
+
+# --- Gitea ---
+GITEA_URL=
+GITEA_TOKEN=
+GITEA_ORG=
+
+# --- Database & app auth ---
+DATABASE_URL=
+JWT_SECRET=
+JWT_REFRESH_SECRET=
+JWT_EXPIRES_IN=
+JWT_REFRESH_EXPIRES_IN=
+SESSION_SECRET=
+ADMIN_CENTRAL_API_KEY=
+DBIS_CENTRAL_URL=
+ADMIN_JWT_SECRET=
+
+# --- Storage (AWS / Azure) ---
+STORAGE_TYPE=
+STORAGE_PATH=
+AWS_REGION=
+AWS_ACCESS_KEY_ID=
+AWS_SECRET_ACCESS_KEY=
+AWS_S3_BUCKET=
+AZURE_STORAGE_CONNECTION_STRING=
+AZURE_STORAGE_CONTAINER=
+
+# --- Blockchain / SMOM-DBIS-138 (use smom-dbis-138/.env for PRIVATE_KEY) ---
+PRIVATE_KEY=
+RPC_URL_138=
+RPC_URL_138_PUBLIC=
+ETHEREUM_MAINNET_RPC=
+CHAIN_651940_RPC_URL=
+ETHERLINK_RPC_URL=
+TEZOS_RPC_URL=
+ETHERSCAN_API_KEY=
+ETHERLINK_CCIP_SELECTOR=
+TEZOS_BRIDGE_ENABLED=
+ETHERLINK_BRIDGE_ENABLED=
+TEZOS_RELAY_ORACLE_KEY=
+ETHERLINK_RELAY_BRIDGE=
+ETHERLINK_RELAY_PRIVATE_KEY=
+JUMPER_API_KEY=
+ONEINCH_API_KEY=
+MOONPAY_API_KEY=
+MOONPAY_SECRET_KEY=
+RAMP_NETWORK_API_KEY=
+ONRAMPER_API_KEY=
+
+# --- Alerts & monitoring ---
+SLACK_WEBHOOK_URL=
+PAGERDUTY_INTEGRATION_KEY=
+EMAIL_ALERT_API_URL=
+EMAIL_ALERT_RECIPIENTS=
+SENTRY_DSN=
+
+# --- Legal / e-signature ---
+E_SIGNATURE_BASE_URL=
+
+# --- OTC / exchanges (dbis_core) ---
+CRYPTO_COM_API_KEY=
+CRYPTO_COM_API_SECRET=
+CRYPTO_COM_ENVIRONMENT=
+BINANCE_API_KEY=
+BINANCE_API_SECRET=
+KRAKEN_API_KEY=
+KRAKEN_PRIVATE_KEY=
+OANDA_API_KEY=
+OANDA_ACCOUNT_ID=
+OANDA_ENVIRONMENT=
+FXCM_API_TOKEN=
+
+# --- Price / market data ---
+COINGECKO_API_KEY=
+COINDESK_API_KEY=
+COINMARKETCAP_API_KEY=
+DEXSCREENER_API_KEY=
+
+# --- Mifos / Fineract / OMNL ---
+MIFOS_BASE_URL=
+MIFOS_TENANT=
+MIFOS_USER=
+MIFOS_PASSWORD=
+MIFOS_INSECURE=
+OMNL_FINERACT_BASE_URL=
+OMNL_FINERACT_TENANT=
+OMNL_FINERACT_USER=
+OMNL_FINERACT_PASSWORD=
+
+# --- Phoenix / Sankofa / OMNIS backend ---
+SANKOFA_PHOENIX_API_URL=
+SANKOFA_PHOENIX_CLIENT_ID=
+SANKOFA_PHOENIX_CLIENT_SECRET=
+SANKOFA_PHOENIX_TENANT_ID=
+
+# --- Frontend / MetaMask / Explorer ---
+VITE_WALLETCONNECT_PROJECT_ID=
+VITE_THIRDWEB_CLIENT_ID=
+VITE_ETHERSCAN_API_KEY=
+VITE_SENTRY_DSN=
+VITE_API_URL=
+VITE_API_BASE_URL=
+NEXT_PUBLIC_API_URL=
+NEXT_PUBLIC_CHAIN_ID=
+METAMASK_API_KEY=
+THIRDWEB_SECRET_KEY=
+NPM_ACCESS_TOKEN=
+
+# --- DeFi aggregators (alltra-lifi-settlement) ---
+PARASWAP_API_KEY=
+ZEROX_API_KEY=
+
+# --- ProxmoxVE API (MongoDB) ---
+MONGO_USER=
+MONGO_PASSWORD=
+MONGO_IP=
+MONGO_PORT=
+MONGO_DATABASE=
+
+# --- Chain138 RPC (config) ---
+CHAIN138_RPC_URL=
+RPC_URL_138_FIREBLOCKS=
+WS_URL_138_FIREBLOCKS=
+CHAIN_ID_138=
+
+# --- Phoenix deploy API ---
+PORT=
+GITEA_TOKEN=
+
+# --- Optional / per-service ---
+MARKET_REPORTING_API_KEY=
+E_FILING_ENABLED=
+NODE_ENV=