Reference
Environment Variables
Runtime environment variables by custody and service boundary.
Server-Only Secrets
These must not be exposed through browser VITE_* variables:
| Variable | Used by |
|---|---|
SPONSOR_SIGNER_PRIVATE_KEY | quote signing / solver submission |
QUOTE_SIGNER_PRIVATE_KEY | quote signer alias |
REGISTERED_ISSUER_QUOTE_SIGNER_PRIVATE_KEY | registered-issuer signer alias |
M1_JWT | M1 API material |
ORACLE_UPDATER_PRIVATE_KEY | fixed oracle updater |
LI_FI_INTENTS_API_KEY | LI.FI solver/order API |
Runtime Identity
Prefer manifests over copied defaults:
| Variable | Purpose |
|---|---|
CHAIN_ID | target chain |
COLLATERAL_MANAGER | active manager |
SETTLEMENT_CONTROLLER | registered-issuer controller |
RISK_CONFIG | risk policy contract |
ORACLE / ORACLE_ADAPTER | oracle adapter |
TARGET_POOL_ID | pool used by LI.FI/build flows |
LI.FI
| Variable | Purpose |
|---|---|
LI_FI_ORDER_SERVER_BASE | LI.FI API base |
LI_FI_INVENTORY_ROUTES_JSON | route inventory |
LI_FI_TRUST_COMPONENTS_JSON | trust-component policy |
LI_FI_REPLAY_PGLITE_DATA_DIR | durable replay storage |
LI_FI_SERVE_VERIFY_IDENTITY | fail closed on missing identity |
LI_FI_SERVE_FILL_ORDERS | enable order fills |
LI_FI_SERVE_SUBMIT_FINALISE | enable live finalise submission |
Public Browser Values
Only expose values that are intended for public clients, such as public RPC URLs and wallet project ids. Run the interface secret-boundary check before shipping:
make interface-secret-check