secrets.env.example

# =============================================================================
# Privacy Router - Secrets Configuration (Optional Convenience File)
# =============================================================================
# This file is ONE option for providing secrets to the agent.
# When the agent needs a secret, it will ask for your consent first.
#
# You can then choose to:
#   A) Point agent to this file (if you've prepared it)
#   B) Paste the secret directly in chat
#   C) Decline agent handling and enter secrets manually into config files
#
# If using this file:
#   1. Copy secrets.env.example to secrets.env
#   2. Fill in your values below
#   3. Tell the agent "I've put it in secrets.env" when asked
#
# NOTE: This is NOT a traditional .env file loaded into app environment.
# It's a secrets reference file - the agent reads values during deployment
# and injects them into configuration files (e.g., awg0.conf).
#
# This file is gitignored - your secrets stay local.
# =============================================================================

# -----------------------------------------------------------------------------
# VPN Private Key (REQUIRED)
# -----------------------------------------------------------------------------
# Get this from your VPN provider's account page or WireGuard config download.
#
# Mullvad: Account page → WireGuard configuration → Download/Show key
# IVPN: Client Area → WireGuard → Generate Key
#
# Format: Base64 string, 44 characters ending in =
# Example: kHxE5xh8kL9fR4A2bC3dE5fG6hI7jK8lM9nO0pQ1rS4=
#
VPN_PRIVATE_KEY=

# -----------------------------------------------------------------------------
# Optional: Admin Passwords
# -----------------------------------------------------------------------------
# Leave blank to be prompted during setup, or set here for automated deployment.
#
# Router admin password (OpenWrt LuCI web interface)
# ROUTER_ADMIN_PASSWORD=

# AdGuard Home admin password (if deploying AdGuard)
# ADGUARD_ADMIN_PASSWORD=