Files
smom-dbis-138/config/deployment-omnl.production.env.example
zaragoza444 5a9889cace
Some checks failed
CI/CD Pipeline / Solidity Contracts (push) Failing after 1m3s
CI/CD Pipeline / Security Scanning (push) Successful in 2m58s
CI/CD Pipeline / Lint and Format (push) Failing after 46s
CI/CD Pipeline / Terraform Validation (push) Failing after 26s
CI/CD Pipeline / Kubernetes Validation (push) Successful in 29s
Deploy ChainID 138 / Deploy ChainID 138 (push) Failing after 41s
HYBX OMNL TypeScript & anchor / token-aggregation build + reconcile artifact (push) Failing after 22s
OMNL reconcile anchor / Run omnl:reconcile and upload artifacts (push) Failing after 24s
Validation / validate-genesis (push) Successful in 32s
Validation / validate-terraform (push) Failing after 28s
Validation / validate-kubernetes (push) Failing after 13s
Validation / validate-smart-contracts (push) Failing after 12s
Validation / validate-security (push) Failing after 1m31s
Validation / validate-documentation (push) Failing after 23s
Verify Deployment / Verify Deployment (push) Failing after 1m4s
feat(settlement): production BTC L1 rails, hot cBTC liquidity, Dfns/Cobo smoke
Add BTC L1 settle/reconcile/ledger APIs, bitcoind intake, cBTC PMM hot-LP scripts, and custody credential smoke tests (secrets stay gitignored). Enables full-prod local green health and server pull-deploy for secure.omdnl.org /btc/*.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-07-19 09:28:24 -07:00

103 lines
3.6 KiB
Plaintext
Raw Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
# OMNL Bank — production environment (copy to .env.production, never commit secrets)
# === Public URLs (nginx / Cloudflare) ===
OMNL_BANK_PUBLIC_URL=https://bank.omnl.hybxfinance.io
VITE_TOKEN_AGGREGATION_URL=https://bank.omnl.hybxfinance.io/api/v1
VITE_SETTLEMENT_MIDDLEWARE_URL=https://bank.omnl.hybxfinance.io/settlement
VITE_DBIS_EXCHANGE_URL=https://bank.omnl.hybxfinance.io/exchange
# === Production configs ===
SETTLEMENT_MIDDLEWARE_CONFIG=config/settlement-middleware.production.v1.json
DBIS_EXCHANGE_CONFIG=config/dbis-exchange.production.v1.json
OMNL_SUPPORTED_CHAINS_CONFIG=config/omnl-supported-chains.v1.json
OMNL_M2_TOKEN_REGISTRY=config/omnl-m2-token-registry.v1.json
OMNL_CROSS_CHAIN_CONFIG=config/hybx-omnl-cross-chain-lines.json
# === Production gates (enable after audit) ===
SETTLEMENT_ALLOW_HYBX_PRODUCTION=1
SETTLEMENT_ALLOW_CHAIN_MINT_EXECUTE=1
OMNL_ALLOW_CHAIN_MINT_EXECUTE=1
# === Auth ===
OMNL_API_KEY=
# Do NOT set VITE_OMNL_API_KEY in production (nginx injects server-side)
# === Four super-admin portal keys (one per LXC 58255828) ===
OMNL_SUPER_ADMIN_OFFICE24_KEY=
OMNL_SUPER_ADMIN_EXCHANGE_KEY=
OMNL_SUPER_ADMIN_SECURE_KEY=
OMNL_SUPER_ADMIN_FOREX_KEY=
OMNL_PORTAL_INTERNAL_SECRET=
# === Customer API keys (read + trade scopes only; comma-separated key:scope) ===
OMNL_CUSTOMER_API_KEYS=
OMNL_CUSTOMER_API_KEY_1=
OMNL_CUSTOMER_SECURITY_PRODUCTION=1
JWT_SECRET=
# === On-chain M2 mint / transfer (Chain 138 operator) ===
OMNL_MINT_OPERATOR_PRIVATE_KEY=
TOKEN_AGGREGATION_URL=http://127.0.0.1:3000
# === HYBX / bank rails (SWIFT + IBAN) ===
HYBX_MIFOS_FINERACT_SIDECAR_URL=
SWIFT_LISTENER_URL=
# === Primary chain 138 ===
RPC_URL_138=http://192.168.11.221:8545
CHAIN_138_RPC_URL=http://192.168.11.221:8545
# === Mirror chain 651940 ===
CHAIN_651940_RPC_URL=https://mainnet-rpc.alltra.global
# === Z Chain — deploy via scripts/deployment/deploy-z-ecosystem-production.sh ===
# Portal: https://zblockchainsystem.com — see config/z-ecosystem.local.env.example
# === Major L1/L2 RPC (set per chain — CHAIN_<id>_RPC_URL) ===
CHAIN_1_RPC_URL=https://eth.llamarpc.com
CHAIN_56_RPC_URL=https://bsc-dataseed.binance.org
CHAIN_137_RPC_URL=https://polygon-bor-rpc.publicnode.com
CHAIN_42161_RPC_URL=https://arb1.arbitrum.io/rpc
CHAIN_8453_RPC_URL=https://mainnet.base.org
CHAIN_10_RPC_URL=https://mainnet.optimism.io
# === Fineract / Office 24 ===
OMNL_FINERACT_BASE_URL=
OMNL_FINERACT_TENANT=omnl
OMNL_FINERACT_USERNAME=ali_hospitallers_tenant
OMNL_FINERACT_PASSWORD=
OMNL_PUBLIC_MONEY_SUPPLY=1
OFFICE24_OPENING_M1_USD=
# === Frontend ===
VITE_WALLETCONNECT_PROJECT_ID=
VITE_THIRDWEB_CLIENT_ID=
VITE_RPC_URL_138=http://192.168.11.221:8545
VITE_ENHANCED_SWAP_ROUTER_V2=0xa421706768aeb7fafa2d912c5e10824ef3437ad4
# === BTC L1 custody + live pricing ===
OMNL_REQUIRE_LIVE_BTC_PRICE=1
ISO4217_FX_REFRESH_INTERVAL_MS=60000
# Optional override if oracle down (only set deliberately):
# CHAIN138_CANONICAL_PRICE_USD_BTC=
BITCOIND_RPC_URL=
BITCOIND_RPC_USER=
BITCOIND_RPC_PASS=
BTC_NETWORK=mainnet
BTC_RESERVE_ADDRESSES=
BTC_CONFIRMATIONS_REQUIRED=6
BTC_INTAKE_PORT=3013
BTC_INTAKE_SYNC_INTERVAL_MS=30000
BTC_MAX_OUTSTANDING_SATS=
SETTLEMENT_MIDDLEWARE_URL=http://127.0.0.1:3011
# cBTC PMM pools (Chain 138 DODO) — set after deploy
CHAIN138_POOL_CBTC_CUSDT=
CHAIN138_POOL_CBTC_CUSDC=
CHAIN138_POOL_CBTC_CXAUC=
# After rebuilding settlement-middleware, redeploy so secure.omdnl.org/settlement/btc/* is live.
# Smoke: SETTLEMENT_URL=https://secure.omdnl.org/settlement OMNL_API_KEY=... node scripts/deployment/smoke-btc-settlement.mjs
# Hot LP: HOT_CBTC_EXECUTE=1 node scripts/deployment/hot-cbtc-liquidity-1000.mjs
# Trade: node scripts/deployment/verify-cbtc-trade.mjs