template.env

# ------------------------------------------------------------------------------
# Grid Node Registry - Example Environment Configuration
# Copy this file to `.env` and adjust the values as appropriate.
# ------------------------------------------------------------------------------


# The universe this registry instance serves — REQUIRED, no default. A registry
# is scoped to exactly one universe; every alias it holds carries this as its
# first dotted segment. d… = dev, h… = hybrid; a w… (production) universe
# refuses to boot until its trust machinery exists.
GNR_UNIVERSE=d1

# Grid Node Registry - Docker-based development config
# Driver MUST be psycopg v3 (`+psycopg`) — that is the installed driver
# (`psycopg[binary]`); a bare `postgresql://` URL selects psycopg2, which is absent.
GNR_DB_URL=postgresql+psycopg://gnr:gnrpass@localhost:5435/gnr

# Optional: enable SQLAlchemy echo for debugging
GNR_DB_ECHO=false

# Stop-gap write authorization (until mTLS+FIS): sha256 hex of the operator's
# write Proof. When set, every create/re-parent command must carry the
# matching Proof or is refused. The secret itself lives only with the
# operator (mint: openssl rand -hex 32; hash: printf '%s' "$SECRET" | shasum -a 256).
# GNR_WRITE_PROOF_SHA256=

# ------------------------------------------------------------------------------
# `gnr rabbit` (the write loop). One .env, one GNR_ prefix — broker connection
# and service identity included. Orchestration aliases are REQUIRED, no
# defaults. Convention: the registry's alias is `<universe>.registry`; the
# vhost is `<universe>__<run>`. Broker creds live here in .env, never in code.
# ------------------------------------------------------------------------------
GNR_SUPER_ALIAS=d1.super1
GNR_TIME_COORDINATOR_ALIAS=d1.time
GNR_SERVICE_ALIAS=d1.registry
GNR_RABBIT__URL=amqp://smqPublic:smqPublic@localhost:5672/d1__1

# Optional: rabbit-actor log level (DEBUG/INFO/WARNING/ERROR). The actor logs
# to ~/.local/state/gridworks/gnr/log/<service-alias>.log (gwbase XDG paths).
GNR_LOG_LEVEL=INFO

# ------------------------------------------------------------------------------
# `gnr api` (the read façade) — loopback bind; the TLS proxy fronts it in
# deploy, so a non-local bind is a deliberate declaration.
# ------------------------------------------------------------------------------
GNR_API_HOST=127.0.0.1
GNR_API_PORT=8000