Merge branch 'dev' into passenger/feat/iam

apps/edr-passenger-api/.env.example

@@ -1,6 +1,6 @@
 # App
 NODE_ENV=development
-PORT=3002
+PORT=4000
 
 # Database (Prisma) — owns the `passenger` schema in edr_database
 DATABASE_URL=postgresql://edr:edr_secret@localhost:5432/edr_database?schema=passenger
@@ -94,17 +94,42 @@ CARD_WEBHOOK_SECRET=
 CARD_WEBHOOK_URL=
 CARD_RETURN_URL=
 
-# Waafi (Djibouti Mobile Money)
-WAAFI_BASE_URL=https://api.waafipay.net
+# Waafi (Djibouti Mobile Money — Hosted Payment Page)
+# Sandbox: https://sandbox.waafipay.net  |  Production: https://api.waafipay.net
+WAAFI_BASE_URL=https://sandbox.waafipay.net
 WAAFI_MERCHANT_UID=
-WAAFI_API_USER_ID=
-WAAFI_API_KEY=
+WAAFI_STORE_ID=
+WAAFI_HPP_KEY=
+# HMAC secret returned once by WEBHOOK_REGISTER — verifies inbound webhooks
+WAAFI_WEBHOOK_SECRET=
+WAAFI_PAYMENT_METHOD=MWALLET_ACCOUNT
+# Waafi has no ETB; overrides booking currency (USD/DJF/SLSH)
+WAAFI_CURRENCY=DJF
+WAAFI_HPP_SUCCESS_URL=
+WAAFI_HPP_FAILURE_URL=
+# 1 = POST, 2 = GET, 4 = Result Token
+WAAFI_HPP_RESP_FORMAT=1
+# Registered webhook URL (registration done out-of-band)
 WAAFI_NOTIFY_URL=
-WAAFI_RETURN_URL=
+# DEV ONLY — disable TLS cert verification (sandbox serves a *.waafi.com cert). Never true in prod.
+WAAFI_INSECURE_TLS=false
 
 # Payment Configuration
 PAYMENT_PROVIDERS_ENABLED=TELEBIRR,CBE_BIRR,EBIRR,CARD,WALLET,WAAFI
 
+# Browser return targets after a hosted payment page (UX only — payment is confirmed by the
+# webhook/queryStatus, never this redirect). Global fallback used when a method-specific URL
+# below is unset. Most providers use a single redirect; Waafi takes separate success/failure.
+PAYMENT_RETURN_URL=
+PAYMENT_FAILURE_URL=
+TELEBIRR_RETURN_URL=
+WAAFI_SUCCESS_REDIRECT=
+WAAFI_FAIL_REDIRECT=
+DMONEY_RETURN_URL=
+CBE_RETURN_URL=
+EBIRR_RETURN_URL=
+CARD_RETURN_URL=
+
 # Session Configuration
 SESSION_INACTIVITY_MINUTES=30
 
@@ -133,3 +158,19 @@ FAYDA_CLAIMS_LOCALES=en am
 FAYDA_SESSION_TTL_MINUTES=10
 
 GITHUB_PACKAGE_TOKEN=
+
+# --- Notification broker (RabbitMQ) -----------------------------------------------------------------
+# Set RABBITMQ_ENABLED=false to skip connection entirely (dev without a local broker).
+RABBITMQ_ENABLED=false
+RABBITMQ_URL=amqp://localhost:5672
+EMAIL_QUEUE=email_queue
+SMS_QUEUE=sms_queue
+
+# --- Payment event consumer (RabbitMQ) -------------------------------------------------------
+# Consumes payment.succeeded / payment.failed events from the payment microservice. Separate
+# from any RABBITMQ_URL used by the IAM/notification modules so the two connections are
+# independent. Points at the dedicated `payment` vhost on the (shared) broker.
+# Local dev broker (docker): amqp://edr:edr_secret@localhost:5672/payment
+PAYMENT_RABBITMQ_URL=amqp://edr:edr_secret@localhost:5672/payment
+# Max unacknowledged payment events this consumer holds at once.
+PAYMENT_EVENTS_PREFETCH=10