# Oven Service Environment Variables
# Copy to /aesthetic-computer-vault/oven/.env and fill in values

# DigitalOcean Spaces - Source ZIPs
ART_SPACES_KEY=your_key_here
ART_SPACES_SECRET=your_secret_here
ART_SPACES_ENDPOINT=https://sfo3.digitaloceanspaces.com
ART_SPACES_BUCKET=art-aesthetic-computer

# DigitalOcean Spaces - Processed Videos
AT_BLOBS_SPACES_KEY=your_key_here
AT_BLOBS_SPACES_SECRET=your_secret_here
AT_BLOBS_SPACES_ENDPOINT=https://sfo3.digitaloceanspaces.com
AT_BLOBS_SPACES_BUCKET=at-blobs-aesthetic-computer

# Optional: Custom CDN domain (requires Cloudflare CNAME setup)
# AT_BLOBS_CDN=at-blobs.aesthetic.computer

# Webhook callback authentication
CALLBACK_SECRET=generate_random_secret_here

# OS base-image admin key (required for /os-base-build POST/cancel)
# Prefer file-based secret in production:
#   OS_BUILD_ADMIN_KEY_FILE=/opt/oven/secrets/os-build-admin-key.txt
OS_BUILD_ADMIN_KEY=change_me_long_random_secret
# OS_BUILD_ADMIN_KEY_FILE=/opt/oven/secrets/os-build-admin-key.txt

# OS base-image build runtime
OS_BASE_IMAGE_SIZE_GB=4
OS_BASE_BUILD_SCRIPT=/opt/oven/fedac/scripts/make-kiosk-piece-usb.sh
OS_BASE_BUILD_CWD=/opt/oven
# OS_BASE_WORK_BASE=/tmp
# OS_BASE_KEEP_ARTIFACTS=0

# Paper crunch (on-demand private LaTeX; auth = OS_BUILD_ADMIN_KEY)
# CRUNCH_WORK_DIR=/tmp/oven-crunch

# OS base-image artifact destination (DigitalOcean Spaces)
OS_SPACES_KEY=your_key_here
OS_SPACES_SECRET=your_secret_here
OS_SPACES_ENDPOINT=https://sfo3.digitaloceanspaces.com
OS_SPACES_BUCKET=assets-aesthetic-computer
OS_SPACES_CDN_BASE=https://assets-aesthetic-computer.sfo3.cdn.digitaloceanspaces.com
OS_SPACES_PREFIX=os

# Service configuration
PORT=3002
NODE_ENV=development

# MongoDB (optional - for persistent bake history)
# MONGODB_CONNECTION_STRING=mongodb://...
# MONGODB_NAME=aesthetic-computer