.env.example

# IPFS Pinning Service Configuration

# Server Configuration
PORT=6000

# ============================================
# Database Configuration
# ============================================
# Option 1: SQLite (default, path relative to working directory)
DATABASE_PATH=data/pinning.db

# Option 2: PostgreSQL (takes precedence if POSTGRES_HOST is set)
# For production use with multiple apps accessing the database
# POSTGRES_HOST=localhost
# POSTGRES_PORT=5432
# POSTGRES_DB=pinning_service
# POSTGRES_USER=pinning_user
# POSTGRES_PASSWORD=your_secure_password
# POSTGRES_SSL=false

# ============================================
# IPFS Configuration
# ============================================
IPFS_API_ADDR=/ip4/127.0.0.1/tcp/5001

# Blockchain Configuration
POOL_ID=1

# ============================================
# Admin API Configuration
# ============================================
# Generate a secure random key for production use
SYSTEM_KEY=your_secure_system_key_here

# ============================================
# DAG Import (CAR upload) — vendor extension
# ============================================
# Master switch for POST /pins/import/car (404 when off). Set the SAME flag in
# the pinning-webui .env so the UI button and the endpoint appear together.
DAG_IMPORT_ENABLED=false
# Max CAR file size in bytes (default 800 MB — matches the nginx
# client_max_body_size on the webui vhost and the ipfs-server upload cap).
# DAG_IMPORT_MAX_CAR_BYTES=838860800
# Max size of a single block (default 2 MiB — the bitswap servability limit).
# DAG_IMPORT_MAX_BLOCK_BYTES=2097152
# Max unique blocks per CAR (also bounds validator memory).
# DAG_IMPORT_MAX_BLOCKS=250000
# Max dag-cbor nesting depth per block. A deeply-nested <=2MiB dag-cbor block
# decodes into a multi-hundred-MB in-memory tree; this cheap structural
# pre-scan rejects nesting bombs before that decode. 1024 is orders of
# magnitude beyond any real DAG. Set 0 to disable.
# DAG_IMPORT_MAX_DAG_DEPTH=1024
# Max GLOBAL concurrent imports before responding 429 (bounds temp-disk +
# validation memory: concurrency x max CAR size must fit the temp filesystem).
# DAG_IMPORT_MAX_CONCURRENT=5
# Max concurrent imports PER USER (default 1). Keeps a single user from
# occupying every global slot and starving everyone for an import's lifetime.
# DAG_IMPORT_MAX_CONCURRENT_PER_USER=1
# Directory CAR uploads are spooled to (created if missing). Default: the OS
# temp dir. IMPORTANT under systemd hardening: ProtectSystem=strict makes
# /tmp read-only — either set PrivateTmp=true in the unit, or point this at a
# path listed in the unit's ReadWritePaths.
# DAG_IMPORT_TMP_DIR=/var/lib/fula-dag-import
# Balance preflight: the user's FULA balance must cover the PROJECTED
# post-import storage over the 500MB free tier for this many days (default 30
# = one month), at FULA_PER_GB_MONTH. Imports fitting inside the free tier
# require no balance. Set to 0 to disable (any positive balance suffices —
# the pre-existing behavior of the other upload paths).
# DAG_IMPORT_MIN_BALANCE_DAYS=30
# Storage price used by the preflight — MUST match the webui deduction job's
# FULA_PER_GB_MONTH (default 3).
# FULA_PER_GB_MONTH=3