# =============================================================================
# Identity Service - Environment Variables
# =============================================================================

# Application
APP_PORT=3000
APP_ENV="development"

# Database (PostgreSQL)
DATABASE_URL="postgresql://postgres:password@localhost:5432/rwa_identity?schema=public"

# JWT
JWT_SECRET="your-super-secret-jwt-key-change-in-production"
JWT_ACCESS_EXPIRES_IN="2h"
JWT_REFRESH_EXPIRES_IN="30d"

# Redis
REDIS_HOST="localhost"
REDIS_PORT=6379
REDIS_PASSWORD=""
REDIS_DB=0

# Kafka
KAFKA_BROKERS="localhost:9092"
KAFKA_CLIENT_ID="identity-service"
KAFKA_GROUP_ID="identity-service-group"

# SMS Service
SMS_API_URL="https://sms-api.example.com"
SMS_API_KEY="your-sms-api-key"

# Wallet Encryption
WALLET_ENCRYPTION_SALT="rwa-wallet-salt-change-in-production"

# =============================================================================
# MPC Service Configuration
# =============================================================================
# 调用路径: identity-service -> mpc-service (NestJS) -> mpc-system (Go)

# MPC Service URL (NestJS gateway)
MPC_SERVICE_URL="http://localhost:3001"

# MPC Mode: local (模拟) / remote (调用 mpc-service)
MPC_MODE="local"

# Use event-driven communication for MPC operations
MPC_USE_EVENT_DRIVEN="true"

# =============================================================================
# Backup Service Configuration
# =============================================================================
# 安全要求: 必须部署在与 identity-service 不同的物理服务器上!

BACKUP_SERVICE_URL="http://backup-server:3002"
BACKUP_SERVICE_ENABLED="false"
SERVICE_JWT_SECRET="your-service-jwt-secret-change-in-production"

# =============================================================================
# Blockchain RPC URLs (for address verification)
# =============================================================================
KAVA_RPC_URL="https://evm.kava.io"
BSC_RPC_URL="https://bsc-dataseed.binance.org"