.env.example

# =============================================================================
# OdbDesign compose environment template.
#   cp .env.example .env   then fill in real values.
# .env is git-ignored and docker-ignored (never committed, never baked into the
# image). docker compose auto-loads it from the project directory.
#
# NOTE: GITHUB_TOKEN and NUGET_AUTH_TOKEN are typically already exported by your
# shell (~/.api-keys-export.sh, sourced from ~/.bashrc). You only need to set
# them here if compose can't see them in the environment (e.g. non-interactive
# contexts). The build reads them as BuildKit SECRETS, never as build args.
# =============================================================================

# --- Server runtime credentials (REST :8888 + gRPC :50051 basic auth) ---
# Currently not defined anywhere by default — set them here or the server starts
# with empty auth credentials.
ODBDESIGN_SERVER_REQUEST_USERNAME=
ODBDESIGN_SERVER_REQUEST_PASSWORD=

# --- Build-time token sources (consumed as BuildKit secrets) ---
# GitHub PAT. read:packages is enough for local (USE_VCPKG_CACHE=1);
# write:packages is required if you set USE_VCPKG_CACHE=0 (cache upload).
GITHUB_TOKEN=
# GitHub PAT with read:packages scope. REQUIRED for the local read-only vcpkg
# binary cache (USE_VCPKG_CACHE=1). Same token used by
# scripts/setup-vcpkg-cache.sh on the host.
NUGET_AUTH_TOKEN=

# --- Optional build overrides (compose.local.yml already sets sane defaults) ---
# USE_VCPKG_CACHE=1     # 1 = read-only cache (local dev), 0 = write-enabled (CI)
# VCPKG_BINARY_SOURCES=clear;nugetconfig,/etc/vcpkg/local.nuget.config,read
# OWNER=nam20485