# Production monolith env for lith deploys.
# This file is copied to /opt/ac/system/.env on the remote host.

NODE_ENV=production
CONTEXT=production
PORT=8888
DEPLOY_SECRET=replace-with-production-secret

# Dedicated bearer token for PUT https://gym.anthonyzollo.com/api/publish-gym.
# Generate with: openssl rand -hex 32
# GYM_PUBLISH_TOKEN=replace-with-a-long-random-token

# Auth0 subjects allowed to edit the Whistlegraph Desk. The app has a
# two-person code fallback for @jeffrey + @minanimals, but production may set
# this explicitly to rotate the allowlist without a code deploy.
# WHISTLEGRAPH_ADMIN_SUBS=auth0|subject-one,auth0|subject-two

# Cloudflare cache auto-purge (read by lith/webhook.sh).
# Without these set, deploys silently skip the edge purge and stale
# responses can persist for up to 4h (the default static-asset TTL).
#
#   CLOUDFLARE_PURGE_TOKEN: a SCOPED API token with Zone.Cache Purge
#     permission for aesthetic.computer. Create at
#     https://dash.cloudflare.com/profile/api-tokens — do NOT use the
#     Global API Key here.
#   CLOUDFLARE_ZONE_ID: zone ID for aesthetic.computer (use whichever
#     `dig +short NS aesthetic.computer` is on Cloudflare; same zone
#     covers papers.aesthetic.computer, give.aesthetic.computer, etc.)
#
# CLOUDFLARE_PURGE_TOKEN=...
# CLOUDFLARE_ZONE_ID=...