.env.example

# Phoenix environment — copy to .env and fill in values
# Never commit .env to version control

# ── Tailscale ──────────────────────────────────────────────────────────────────
# Generate at https://login.tailscale.com/admin/settings/keys
# Use a reusable, pre-authorised key tagged with "phoenix"
TS_AUTHKEY=tskey-auth-xxxxxxxxxxxx

# ── Linode ─────────────────────────────────────────────────────────────────────
# Personal Access Token: https://cloud.linode.com/profile/tokens
# Scopes needed: Linodes Read/Write
LINODE_TOKEN=your_linode_token_here

# Numeric ID — find with: linode-cli linodes list
LINODE_INSTANCE_ID=12345678

# ── Komodo ─────────────────────────────────────────────────────────────────────
KOMODO_API_URL=https://komodo.cronx.co
KOMODO_API_KEY=your_komodo_api_key
KOMODO_API_SECRET=your_komodo_api_secret
KOMODO_ACTION_ID=your_action_id_or_name

# ── Notifications (at least one recommended) ───────────────────────────────────
SLACK_WEBHOOK_URL=https://hooks.slack.com/services/xxx/yyy/zzz
# ntfy is great for mobile push — create a private topic
NTFY_TOPIC_URL=https://ntfy.sh/phoenix-cronx-CHANGEME

# ── Webhook security ───────────────────────────────────────────────────────────
# Client secret from Sentry: Settings > Developer Settings > (your internal integration) > Client Secret
# Sentry signs each webhook with HMAC-SHA256(client_secret, body) and sends it as the sentry-hook-signature header
SENTRY_CLIENT_SECRET=your_sentry_client_secret_here