example.env

# Shioaji API Credentials (from SinoPac Securities)
API_KEY=your_shioaji_api_key_here
SECRET_KEY=your_shioaji_secret_key_here

# Dashboard Authentication Key (set your own secure password)
AUTH_KEY=your_secure_auth_key_here

# Supported Futures Products (comma-separated, optional)
# Common options: MXF (小台), TXF (大台), EXF (電子期), FXF (金融期), etc.
# See: https://sinotrade.github.io/zh/tutor/contract/
SUPPORTED_FUTURES=MXF,TXF

# CA Certificate (Required for REAL trading only, not needed for simulation)
# Download from SinoPac and place the .pfx file in ./certs/ folder
# person_id is auto-detected from your account after login
CA_PATH=/app/certs/Sinopac.pfx
CA_PASSWORD=your_ca_password_here

# NGROK Configuration (Optional - for exposing API to internet)
# Get your auth token from: https://dashboard.ngrok.com/get-started/your-authtoken
# Free tier provides 1 online ngrok agent with random URL
NGROK_AUTHTOKEN=your_ngrok_auth_token_here

# Custom Domain (Optional - requires paid NGROK plan)
# Register your domain at: https://dashboard.ngrok.com/cloud-edge/domains
# Examples: myapp.ngrok.io (Personal plan) or api.yourdomain.com (Pro plan)
# Leave empty or comment out for free random URL
#NGROK_DOMAIN=shioaji.ngrok.app

# IP Whitelist (comma-separated IPv4 addresses or CIDR ranges)
# Only whitelisted IPs can access the API through NGINX
# Supports: single IPs (192.168.1.1), CIDR ranges (10.0.0.0/8)
# Default: 0.0.0.0/0 (allow all IPs)
# Examples:
#   Allow all: ALLOWED_IPS=0.0.0.0/0
#   Single IP: ALLOWED_IPS=203.0.113.50
#   Multiple IPs: ALLOWED_IPS=203.0.113.50,198.51.100.0/24,192.0.2.1
#   Private networks: ALLOWED_IPS=10.0.0.0/8,172.16.0.0/12,192.168.0.0/16
ALLOWED_IPS=0.0.0.0/0