How to sign transactions from your backend without exposing the private key

Keep the key out of your server. Put the rule that decides each signature next to the key. Here is how that works on Lit, with the code.