myc

Self-custodial remote signer for Radroots apps
git clone https://radroots.dev/git/myc.git
Log | Files | Refs | README | LICENSE

commit 448da4402cbe1cfea53951490cba55b8a9ac456c
parent f2716b52aefe4da80629ae555ab13466d3044286
Author: triesap <tyson@radroots.org>
Date:   Sun, 22 Mar 2026 19:38:26 +0000

config: separate deployment and local myc env baselines

- keep .env.example aligned to deployment-style radroots host relay and path values
- keep runtime var state out of git and leave local machine paths in the ignored .env only
- preserve the deterministic localhost fixture flow through absolute local paths outside the myc repo
- avoid committing local-only identity material while keeping the checked example usable for operators

Diffstat:
M.env.example | 25++++++++++++-------------
M.gitignore | 1+
2 files changed, 13 insertions(+), 13 deletions(-)

diff --git a/.env.example b/.env.example @@ -1,25 +1,24 @@ -# explicit runtime contract for myc -# copy to `.env` for local runs and replace paths/relays/domains with real values - MYC_SERVICE_INSTANCE_NAME=myc MYC_LOGGING_FILTER=info,myc=info +MYC_LOGGING_OUTPUT_DIR=/var/log/myc +MYC_LOGGING_STDOUT=true -MYC_PATHS_STATE_DIR=var -MYC_PATHS_SIGNER_IDENTITY_PATH=var/signer-identity.json -MYC_PATHS_USER_IDENTITY_PATH=var/user-identity.json +MYC_PATHS_STATE_DIR=/var/lib/myc +MYC_PATHS_SIGNER_IDENTITY_PATH=/etc/myc/identities/signer-identity.json +MYC_PATHS_USER_IDENTITY_PATH=/etc/myc/identities/user-identity.json MYC_AUDIT_DEFAULT_READ_LIMIT=200 MYC_AUDIT_MAX_ACTIVE_FILE_BYTES=262144 MYC_AUDIT_MAX_ARCHIVED_FILES=8 MYC_DISCOVERY_ENABLED=true -MYC_DISCOVERY_DOMAIN=localhost +MYC_DISCOVERY_DOMAIN=myc.radroots.org MYC_DISCOVERY_HANDLER_IDENTIFIER=myc -MYC_DISCOVERY_APP_IDENTITY_PATH=var/app-identity.json -MYC_DISCOVERY_PUBLIC_RELAYS=ws://localhost:8080 -MYC_DISCOVERY_PUBLISH_RELAYS=ws://localhost:8080 -MYC_DISCOVERY_NOSTRCONNECT_URL_TEMPLATE=http://localhost/connect?uri=<nostrconnect> -MYC_DISCOVERY_NIP05_OUTPUT_PATH=var/public/.well-known/nostr.json +MYC_DISCOVERY_APP_IDENTITY_PATH=/etc/myc/identities/app-identity.json +MYC_DISCOVERY_PUBLIC_RELAYS=wss://relay.radroots.org +MYC_DISCOVERY_PUBLISH_RELAYS=wss://relay.radroots.org +MYC_DISCOVERY_NOSTRCONNECT_URL_TEMPLATE=https://myc.radroots.org/connect?uri=<nostrconnect> +MYC_DISCOVERY_NIP05_OUTPUT_PATH=/var/lib/myc/public/.well-known/nostr.json MYC_DISCOVERY_METADATA_NAME=myc MYC_DISCOVERY_METADATA_DISPLAY_NAME=Radroots Signer MYC_DISCOVERY_METADATA_ABOUT=Radroots NIP-46 signer @@ -30,4 +29,4 @@ MYC_POLICY_CONNECTION_APPROVAL=explicit_user MYC_TRANSPORT_ENABLED=true MYC_TRANSPORT_CONNECT_TIMEOUT_SECS=10 -MYC_TRANSPORT_RELAYS=ws://localhost:8080 +MYC_TRANSPORT_RELAYS=wss://relay.radroots.org diff --git a/.gitignore b/.gitignore @@ -12,6 +12,7 @@ Thumbs.db # Local development files .vscode/ .idea/ +var/ # Local secrets *.pem