Files
bridge/config.yaml
T
zeekay 7e582faaf3 security: remove plaintext MPC badger password from config.yaml
C4 remediation: the MPC database password was stored as plaintext in
the tracked config.yaml file. Replaced with placeholder — production
reads the rotated secret via ZAPDB_PASSWORD from K8s bridge-secrets.
2026-03-19 01:15:18 -07:00

14 lines
450 B
YAML

nats:
url: nats://127.0.0.1:4223
consul:
address: localhost:8500
mpc_threshold: 2
environment: local # Options: mainnet, testnet, local
badger_password: "REPLACE_FROM_KMS" # Set via ZAPDB_PASSWORD env var in production
event_initiator_pubkey: "c3f3511cd2f849fd61e81ea62a842fd33367ee8fb5b867bb900877c7fb72ce3b"
max_concurrent_keygen: 2
db_path: "./data/mpc"
backup_enabled: true
backup_period_seconds: 300 # 5 minutes
backup_dir: ./data/backups