# WineBox Secrets Configuration
#
# Copy this file to one of the following locations:
#   - ./secrets.env (project root - for development)
#   - ~/.config/winebox/secrets.env (user secrets)
#   - /etc/winebox/secrets.env (system secrets - production)
#
# IMPORTANT: This file contains sensitive credentials.
# - Never commit this file to version control
# - Set restrictive permissions: chmod 600 secrets.env
# - Production: owned by winebox user with 600 permissions

# =============================================================================
# Required
# =============================================================================

# Secret key for JWT token signing
# Generate with: python -c "import secrets; print(secrets.token_urlsafe(32))"
# If not set, a random key is generated (tokens invalidate on restart)
WINEBOX_SECRET_KEY=your-secret-key-here

# =============================================================================
# Optional - Claude Vision OCR
# =============================================================================

# Anthropic API key for Claude Vision OCR
# Get your API key from: https://console.anthropic.com/
# If not set, falls back to Tesseract OCR
# WINEBOX_ANTHROPIC_API_KEY=sk-ant-api03-...

# =============================================================================
# Optional - AWS SES Email (only needed when email.backend = "ses")
# =============================================================================

# AWS credentials for SES email sending
# AWS_ACCESS_KEY_ID=AKIA...
# AWS_SECRET_ACCESS_KEY=...
