.env.example

# Registry environment configuration.
#
# Copy to `.env` and fill in values:
#   cp .env.example .env
#
# Project-pinned defaults (DOMAIN, CREATEX) live in `.env.maintainer` and may
# be overridden here.

# --- Connection ---

# RPC URL of the chain to deploy to: mainnet, Sepolia, or any other chain
# CreateX serves. Every deployment goal broadcasts through it, `make verify`
# verifies against its chain, and `make test-fork` forks it to rehearse the
# deployment there first. Change it to change the target.
RPC_URL=

# Private key (0x-prefixed) of the account that deploys and pays gas. If
# your salt embeds a deployer address for CreateX's front-running
# protection, it must be this account.
DEPLOYER_PRIVATE_KEY=

# Etherscan API key, used to verify the contract source after deployment
# (`make deploy` verifies automatically; `make verify` re-verifies).
ETHERSCAN_API_KEY=

# --- Fork testing ---

# Optional block number to pin `make test-fork` to on the RPC_URL chain, for
# reproducible runs. Leave unset to fork the latest block; pinning old blocks
# needs an archive node.
FORK_BLOCK=

# --- CreateX deployment ---

# The salt consumed by CreateX `deployCreate3`. Grind one (e.g. with
# createXcrunch) to pin the Registry to a specific known address.
SALT=

# The address the salt grinds to. The deployment reverts if the deployed
# address does not match, so a wrong or stale salt can never ship silently.
EXPECTED_ADDRESS=

# The salts and expected addresses of the immutable email verifier pair
# deployed by `make deploy-verifier`: the vendored, Barretenberg-generated
# HonkVerifier holding the circuit's verification key, then the immutable
# Verifier pinned to it. Grind both salts as above.
HONK_VERIFIER_SALT=
HONK_VERIFIER_EXPECTED_ADDRESS=
VERIFIER_SALT=
VERIFIER_EXPECTED_ADDRESS=

# The HonkVerifier links two libraries, which forge deploys ahead of it during
# `make deploy-verifier` and records under `libraries` in the run's broadcast
# file (`contracts/broadcast/DeployVerifier.s.sol/<chain id>/run-latest.json`).
# `make verify` needs their addresses to re-verify the stack on the explorer.
RELATIONS_LIB=
ZK_TRANSCRIPT_LIB=

# --- Registry constructor ---

# The email proof verifier the Registry is constructed against: normally
# the immutable Verifier this repository deploys with `make deploy-verifier`
# (copy VERIFIER_EXPECTED_ADDRESS here once ground). Pinned immutably at
# construction. CREATE3 addresses do not depend on constructor arguments, so
# this may change without re-grinding the Registry's salt.
VERIFIER=

# The management multisig: the only administrative role, able to flag profiles
# active or inactive, to maintain the DKIM public key hashes honored for
# DOMAIN (key rotation lives in the Registry itself, so the Foundation holds
# it), and to hand itself over in two steps. `make key-hash SELECTOR=gmail`
# prints the hash to honor for the domain's current key.
MANAGEMENT=