From 1daa9b2ae17c90dd84dbba4f82c34e04b5721700 Mon Sep 17 00:00:00 2001
From: Chris Guidry <chris@theguidrys.us>
Date: Wed, 4 Mar 2026 19:52:54 -0500
Subject: [PATCH] Document environment variable interpolation in README

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---
 README.md | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/README.md b/README.md
index d3ae72b..69481c0 100644
--- a/README.md
+++ b/README.md
@@ -40,6 +40,18 @@ paths:
     subscribe_secret: "token-for-docketeer-subscribers"
 ```
 
+Values support environment variable interpolation via `$VAR` or `${VAR}`
+syntax, so secrets can come from the environment rather than being hardcoded:
+
+```yaml
+paths:
+  github.com/chrisguidry/docketeer:
+    verify: hmac-sha256
+    secret: "${WEBHOOK_SECRET}"
+    signature_header: X-Hub-Signature-256
+    subscribe_secret: "${SUBSCRIBE_TOKEN}"
+```
+
 - Unconfigured paths accept POSTs without verification
 - Configured paths verify webhook signatures and reject invalid ones
 - Subscribe secrets require `Authorization: Bearer <token>` for SSE connections
-- 
2.51.2