.env.example

# ── Discord ─────────────────────────────
DISCORD_BOT_TOKEN=your-bot-token-here

# ── OpenRouter (LLM) ─────────────────────
OPENROUTER_API_KEY=your-openrouter-key-here

# ── Oxigraph (SPARQL store) ──────────────
OXIGRAPH_ENDPOINT=http://oxigraph:7878

# ── Link handler / admin ─────────────────
LINK_SECRET=your-hmac-signing-key-here
MAK_ADMIN_PASSWORD=your-admin-password-here

# ── Dendrite (Matrix homeserver, main) ───
# Postgres password for the `dendrite` DB user (docker-compose POSTGRES_USER=dendrite).
# NOT a Matrix account, NOT an admin login — just the DB credential dendrite-postgres
# and the dendrite service share to connect.
DENDRITE_DB_PASSWORD=your-postgres-password-here
# Fernet key (Fernet.generate_key()) shared verbatim across mak-link-handler and
# mak-agent-bot — encrypts/decrypts deploy-key private keys at rest. Same
# secrets convention as LINK_SECRET — mismatched values silently break decryption.
BOT_KEY_SECRET=your-fernet-key-here

# ── Bernard (bot account) ────────────────
BERNARD_MATRIX_HOMESERVER=https://your-homeserver
BERNARD_MATRIX_USER_ID=@bernard:your-homeserver
BERNARD_MATRIX_ACCESS_TOKEN=your-bernard-access-token
BERNARD_MATRIX_DEVICE_ID=your-bernard-device-id
BERNARD_MATRIX_PASSWORD=your-bernard-password-here

# ── mom_admin (Dendrite admin account, ops only — no bot use) ──
# Needed for admin-only API calls (e.g. resetPassword). Create with:
#   docker exec <dendrite-container> /usr/bin/create-account --config /etc/dendrite/dendrite.yaml -username mom_admin -password <pass> -admin
MOM_ADMIN_PASSWORD=your-admin-password-here
MOM_ADMIN_ACCESS_TOKEN=your-admin-access-token-here

# ── ORS (openrouteservice, isochrone maps) ───
ORS_API_KEY=your-ors-api-key-here