.env.example

# -----------------------------------------------------------------------------
# Server Configuration (dev defaults, required in all environments)
# -----------------------------------------------------------------------------

# Port the registry server listens on
# - Dev/Test: 9000 (from this file)
# - Prod: Set in deployment config
SERVER_PORT=9000

# SQLite database path (relative to working directory)
# - Dev: Uses local ./db directory
# - Test: Overridden to use temp state directory
# - Prod: Set to production database path
DATABASE_URL="sqlite:db/registry.sqlite3"

# -----------------------------------------------------------------------------
# Secrets (required for production, use dummy values for local dev)
# -----------------------------------------------------------------------------
# IMPORTANT: Never commit real secrets. The values below are dummies for testing.

# GitHub personal access token for pacchettibotti bot
# Used for: commits to registry repos, issue management
PACCHETTIBOTTI_TOKEN="ghp_pacchettibotti_token"

# Pacchettibotti SSH keys (base64-encoded)
# Used for: signing authenticated operations (unpublish, transfer)
# Generate with: ssh-keygen -t ed25519 -C "pacchettibotti@purescript.org"
# Encode with: cat key | base64 | tr -d '\n'
PACCHETTIBOTTI_ED25519_PUB="c3NoLWVkMjU1MTkgYWJjeHl6IHBhY2NoZXR0aWJvdHRpQHB1cmVzY3JpcHQub3Jn"
PACCHETTIBOTTI_ED25519="YWJjeHl6"

# DigitalOcean Spaces credentials for S3-compatible storage
# Used for: uploading/downloading package tarballs
SPACES_KEY="digitalocean_spaces_key"
SPACES_SECRET="digitalocean_spaces_secret"


# -----------------------------------------------------------------------------
# Debug / Development Options
# -----------------------------------------------------------------------------

# When "true", the server skips all writes: git push, S3 upload, Pursuit publish.
# Reads and compilations still run normally. Useful for reproducing slow jobs
# locally without affecting the real registry.
# READONLY=true

# -----------------------------------------------------------------------------
# Script-only Secrets (not used by server, used by scripts like legacy-importer)
# -----------------------------------------------------------------------------

# Personal GitHub token for API requests when running scripts
# This is YOUR token, not pacchettibotti's
GITHUB_TOKEN="ghp_your_personal_access_token"