morphit/ops/env/treasury-repin.env.example

43 lines
2.4 KiB
Text

# ───────────────────────────────────────────────────────────────
# Morphit treasury auto-re-pin — MAINTAINER-ONLY config (cp372)
# Copy to /etc/morphit/treasury-repin.env on the @morphit signing box.
#
# Model A pins the listing-fee AMOUNTS on chain so every federated
# indexer enforces the SAME floor. As BTC/XMR/BLURT drift against
# their canonical USD targets the pin goes stale; this timer re-pins
# it. ONLY the @morphit maintainer runs this — community operators
# inherit the chain-pin automatically and need none of this.
# ───────────────────────────────────────────────────────────────
# Indexer to read the current chain-pin (and prices) from.
MORPHIT_REPIN_NODE_URL=https://indexer.morphit.io
# Drift threshold — re-pin when a pinned amount's USD value drifts
# more than this fraction from its canonical target. MUST be >0 and
# <0.15 (it has to sit inside the verifier's FEE_PRICE_TOLERANCE band
# so quotes are never rejected mid-drift). 0.10 is the default.
MORPHIT_REPIN_THRESHOLD=0.1
# Where the indexer workspace lives (the check/broadcast scripts
# import ../src via tsx).
MORPHIT_INDEXER_DIR=/opt/morphit/apps/indexer
# Emit a "current" event even when no re-pin is due (noisy; off by
# default — the timer only speaks up on drift or failure).
MORPHIT_REPIN_VERBOSE=0
# ─── AUTO-BROADCAST (opt-in; leave OFF unless you accept the posture) ─
# 0 (default) = DETECT-ONLY: the timer emits treasury_repin_due when
# the pin drifts and you broadcast by hand (Plan B) —
# release-build-payload.ts | release-broadcast.ts — with NO key
# sitting online.
# 1 = AUTO-BROADCAST: the timer builds + signs + broadcasts the re-pin
# unattended using the key file below. Enable ONLY on a trusted
# signing box, NEVER on the public production server: the @morphit
# posting key can re-pin the treasury, so a leak diverts fees.
MORPHIT_REPIN_ENABLE_AUTO_BROADCAST=0
# Path to a 0600 file containing the @morphit POSTING WIF (the "5..."
# key). Required only when MORPHIT_REPIN_ENABLE_AUTO_BROADCAST=1.
# The broadcaster refuses a group/other-readable key file.
# MORPHIT_REPIN_POSTING_KEY_FILE=/etc/morphit/repin.key