Padreug
e99628ef84
Env table (CLAUDE.md), .env.example, and the deploy README still framed
VITE_RELAY_URL / VITE_LNBITS_SERVER_PUBKEY as required/provisioned; they now come
from the pairing seed and are env overrides only. Also refresh the slimmed seed
shape, the relayUrl/pubkey module examples ("" not wss://relay.aiolabs.dev), and
the stale lamassu-next autoUpgrade flake URL (→ aiolabs/bitspire).
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
83 lines
3.7 KiB
Bash
83 lines
3.7 KiB
Bash
# bitSpire ATM Configuration
|
|
# Copy this file to .env and fill in your values
|
|
|
|
# =============================================================================
|
|
# Hardware Configuration
|
|
# =============================================================================
|
|
|
|
# Machine model preset (sintra, gaia, or custom)
|
|
VITE_LAMASSU_MACHINE_MODEL=sintra
|
|
|
|
# Fiat currency code (ISO 4217)
|
|
VITE_LAMASSU_FIAT_CODE=USD
|
|
|
|
# Custom device paths (optional - uses preset defaults if not set)
|
|
# VITE_LAMASSU_VALIDATOR_DEVICE=/dev/ttyJ5
|
|
# VITE_LAMASSU_DISPENSER_DEVICE=/dev/ttyJ7
|
|
|
|
# Cassette configuration (optional - JSON array)
|
|
# VITE_LAMASSU_CASSETTES='[{"denomination":20,"count":100}]'
|
|
|
|
# =============================================================================
|
|
# LNbits Connection (dev override — normally seed-provided) — nostr-native-transport
|
|
# =============================================================================
|
|
# On a real machine the pairing SEED (VITE_SPIRE_SEED) carries the relay AND the
|
|
# server pubkey (aiolabs/bitspire#70), so leave both blank there. Set them here
|
|
# only for browser dev without a seed/bunker — they WIN over the seed.
|
|
|
|
# Nostr relay WebSocket URL. Dev stack uses LNbits's bundled nostrrelay:
|
|
# VITE_RELAY_URL=ws://localhost:5001/nostrrelay/test
|
|
VITE_RELAY_URL=
|
|
|
|
# LNbits nostr-transport server pubkey (hex, 64 chars).
|
|
# Printed by the LNbits server on startup:
|
|
# docker logs lnbits | grep 'nostr_transport pubkey'
|
|
VITE_LNBITS_SERVER_PUBKEY=
|
|
|
|
# (LNbits HTTP URL is no longer needed on the ATM side — the
|
|
# nostr-transport RPC `lnurlw_create_link` now returns `link.lnurl`
|
|
# populated from `settings.lnbits_baseurl` on the LNbits server. See
|
|
# aiolabs/withdraw#1 / commit e9d911e.)
|
|
|
|
# =============================================================================
|
|
# ATM Identity — spire pairing seed (NIP-46 bunker; aiolabs/bitspire#52)
|
|
# =============================================================================
|
|
|
|
# The spire pairing seed produced by the operator dashboard (spirekeeper):
|
|
# spire-seed:v1:<base64url>
|
|
# It carries a one-shot NIP-46 connect token + the spire's signing pubkey +
|
|
# the bunker URL. On first boot the ATM redeems the token, generates its own
|
|
# transport key, and persists the binding to state.db; thereafter it resumes
|
|
# from the binding (the seed can stay set — it's matched by fingerprint).
|
|
# A changed seed re-pairs (and re-publishes the cassette-state hello).
|
|
VITE_SPIRE_SEED=
|
|
|
|
# pragma: allowlist secret
|
|
# DEV ONLY fallback — a raw Nostr private key (hex, 64 chars) for running
|
|
# without a bunker. Ignored when VITE_SPIRE_SEED or a stored binding exists.
|
|
# Generate with: openssl rand -hex 32
|
|
# VITE_ATM_PRIVATE_KEY=
|
|
|
|
# =============================================================================
|
|
# Operator Identity
|
|
# =============================================================================
|
|
|
|
# Comma-separated list of Nostr hex pubkeys authorized to send operator commands
|
|
# (manual dispense, remote management).
|
|
# VITE_OPERATOR_PUBKEYS=abcd1234...,ef567890...
|
|
|
|
# =============================================================================
|
|
# Maintenance Mode
|
|
# =============================================================================
|
|
|
|
# Show "Under Service" screen and block all transactions
|
|
# VITE_MAINTENANCE_MODE=true
|
|
|
|
# =============================================================================
|
|
# Mock Fallback (Production Safety)
|
|
# =============================================================================
|
|
|
|
# Allow fallback to mock services when hardware/Lightning fails (default: false)
|
|
# Set to 'true' for development/demo environments only
|
|
# When false (production default), initialization failures show a maintenance screen
|
|
# VITE_ALLOW_MOCK_FALLBACK=true
|