.env.example

# ASPL node configuration — copy to .env and adjust. All variables are optional;
# the defaults shown run a working local node.

# ── Server bind ─────────────────────────────────────────────────────────────
ASPL_HOST=0.0.0.0
ASPL_PORT=5010
ASPL_WORKERS=1
ASPL_LOG_LEVEL=info

# ── Storage / identity (paths) ──────────────────────────────────────────────
# SQLite database file.
ASPL_DB=aspl.db
# Node Ed25519 identity (auto-generated on first run, written 0600). KEEP SECRET
# and BACK UP: it is the node's signing key for capabilities, deliveries, STHs.
ASPL_SHOP_KEY=.shop_key
# Append-only transparency / audit log (also the Merkle log's leaves).
ASPL_AUDIT_LOG=audit.jsonl

# ── Anti-sybil ──────────────────────────────────────────────────────────────
# Proof-of-work difficulty in leading zero BITS. 18 ~ 0.5s/registration on a
# modern CPU; raise (22 ~ 8s, 24 ~ 30s) for adversarial deployments.
ASPL_POW_DIFFICULTY=18

# ── Security ────────────────────────────────────────────────────────────────
# Comma-separated CIDRs of trusted reverse-proxy addresses. X-Forwarded-For is
# only honoured when the direct connection comes from one of these networks.
# Example: ASPL_TRUSTED_PROXIES=10.0.0.0/8,172.16.0.0/12
ASPL_TRUSTED_PROXIES=

# ── Federation / bootstrap ──────────────────────────────────────────────────
# Public URL of this node (returned in /.well-known/aspl and federation headers).
ASPL_PUBLIC_URL=

# Comma-separated peer URLs to auto-mirror on startup.
# Example: ASPL_BOOTSTRAP_NODES=https://peer1.example,https://peer2.example
ASPL_BOOTSTRAP_NODES=

# ── Intent matching engine ───────────────────────────────────────────────────
# "auto"     — semantic (sentence-transformers) if installed, else TF-IDF
# "semantic" — always semantic (pip install aspl[semantic])
# "tfidf"    — always TF-IDF (no extra deps)
ASPL_INTENT_ENGINE=auto