init devops repo

Mirrors cipherdolls/devops layout. Hostinger Swarm stacks for the t4t
hosted-gateway and local docker-compose for development + e2e tests.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

hostinger/.env.example

@@ -0,0 +1,41 @@
+# Production .env for the hosted-gateway swarm stack.
+# Copy to .env on the Hostinger host, chmod 600, and `docker stack deploy`.
+# DATABASE_URL, REDIS_*, BEE_API_URL are set in prod-stack.yaml — do NOT
+# override here (the stack file uses internal DNS names).
+
+# --- Auth ---
+JWT_SECRET_KEY=change-me-to-a-long-random-string
+GOOGLE_OAUTH_CLIENT_ID=
+
+# --- Operator wallet (the ONLY on-chain identity) ---
+# Holds xBZZ + xDAI for all tenants. Funded once at bootstrap.
+OPERATOR_PRIVATE_KEY=0x...
+GNOSIS_RPC_URL=https://rpc.gnosischain.com
+
+# --- T4T protocol contracts (Gnosis mainnet) ---
+REGISTRY_ADDRESS=0xf81121AAbc2F7261224BaDd0Ed871711e6D1371E
+ESCROW_ADDRESS=0x34Db8E014E71928f17E23eC1272B602582222c9c
+XBZZ_ADDRESS=0xdBF3Ea6F5beE45c02255B2c26a16F300502F68da
+
+# --- Bee node ---
+# Postage batch is bought once on first deploy and stored in bee-data volume.
+BEE_POSTAGE_BATCH_ID=
+BEE_STAMP_MANAGE=true
+BEE_STAMP_LABEL=hosted-gateway
+BEE_STAMP_TTL_DAYS=30
+
+# Used by the Bee service itself (BEE_*_PASSWORD vars below):
+BEE_PASSWORD=change-me
+BEE_SWAP_ENDPOINT=https://rpc.gnosischain.com
+
+# --- Pricing ---
+MARKUP_BPS=2000
+WELCOME_XBZZ_WEI=50000000000000000000
+
+# --- Concurrency / server ---
+MAX_CONCURRENT_JOBS=200
+LOG_LEVEL=info
+
+# --- Phase 2 (Stripe) — leave blank in v1 ---
+STRIPE_SECRET_KEY=
+STRIPE_WEBHOOK_SECRET=