.env.example

# Copy to .env and fill in. Compose reads .env automatically, so the values
# survive a rebuild regardless of what the shell that runs it has exported.
#
#   cp .env.example .env
#   cp .env.provider.example .env.provider   # gateway only: ANTHROPIC/OPENAI key
#
# Compose reads these files directly rather than through ${VAR} interpolation,
# because interpolation gives an exported shell variable precedence over the
# file — which silently defeats a key rotation.
#   sed -i "s/^AETHERYA_CONSOLE_API_KEY=.*/AETHERYA_CONSOLE_API_KEY=$(openssl rand -hex 32)/" .env
#
# .env is gitignored. .env.example is not — keep real secrets out of it.

# Gates the operator console. Required to record a hard-deny review.
AETHERYA_CONSOLE_API_KEY=replace-me

# Signs the audit chain. Without a real secret the attestation proves the file
# is self-consistent, not that this service produced it.
AETHERYA_ATTESTATION_KEY=replace-me

# Answering a held action in the approval queue. The first authorises the
# operator to answer at all; the second signs the proof that unblocks the agent.
# Both are needed or Approve fails at the click.
AETHERYA_APPROVALS_API_KEY=replace-me
AETHERYA_CONFIRMATION_HMAC_KEY=replace-me

# Gateway target. The actor must exist in capability_matrix.actors, or phase 3
# refuses every call — the gateway refuses to start at phase 3 without it.
AETHERYA_GATEWAY_PROVIDER=anthropic
AETHERYA_GATEWAY_MODEL=claude-opus-5
AETHERYA_GATEWAY_ACTOR=robert