# Secrets only. Copy to .env (chmod 600); it is gitignored, so never commit
# real values. Real environment variables win over this file.
#
# Everything else lives in the YAML config (see nisse-dev.example.yaml),
# which refers to these by name, e.g. `token: ${NISSE_LLM_TOKEN}`. The live
# integration tests use the same names, from tests/integration/nisse-test.yaml.

# llm.token: the LiteLLM virtual key (A5)
NISSE_LLM_TOKEN=replace-me
# matrix.token: the Matrix access token for the agent's account (A1)
NISSE_MATRIX_TOKEN=replace-me
# gitea.token: the Gitea service account's scoped token (B2)
NISSE_GITEA_TOKEN=replace-me
# The end-to-end tests' scripted operator (nisse-testing-operator): scopes
# write:issue and write:repository, write access to the sandbox only.
NISSE_OPERATOR_TOKEN=replace-me
# The live push test reads the sandbox's deploy key from the path in
# tests/integration/nisse-test.yaml (gitea.push_key), not from here.

# Where the config file is, if not ./nisse-dev.yaml. Where this file is, if
# not ./.env, is NISSE_ENV, which has to be set in the real environment.
# NISSE_CONFIG=~/nisse-demo-workspace/nisse-dev.yaml