mise.local.example.toml

# Copy to mise.local.toml (gitignored). The opt-in "load my secrets" layer.
#
# Secrets live OUTSIDE the repo so they never propagate into worktrees and can
# never be committed. One file, shared by every worktree.
#
# 1. Create the secrets file (plaintext):
#      mkdir -p ~/.config/gradient && chmod 700 ~/.config/gradient
#      cat > ~/.config/gradient/secrets.json <<'JSON'
#      {
#        "OPENAI_API_KEY": "sk-...",
#        "COACH_TOKEN": "choose-a-shared-secret",
#        "NOTION_API_TOKEN": "",
#        "NOTION_WIKI_DB_ID": ""
#      }
#      JSON
#      chmod 600 ~/.config/gradient/secrets.json
#
# 2. (Optional) Encrypt it with sops + age, then set MISE_SOPS_AGE_KEY_FILE
#    (or SOPS_AGE_KEY_FILE). The same line below decrypts it at activation.

[env]
_.file = { path = "{{ env.HOME }}/.config/gradient/secrets.json", redact = true }

# Optional machine-local overrides. POSTGRES_DB + DATABASE_URL are derived
# per-branch in mise.toml — don't set them here. Override the connection parts
# only if your local Postgres differs from the docker-compose defaults.
# POSTGRES_USER = "gradient"
# POSTGRES_PASSWORD = "gradient_secret"
# HOST_POSTGRES_PORT = "5432"