# Copy to deploy/secrets/thothii.secrets and chmod 600.
# Values are read as literal strings (no shell expansion or command substitution).
# Leave unused keys out of the file.

# Hosted model provider (single-key providers only).
# THT_MODEL_API_KEY=replace-me

# External DWH adapter.
# THT_DWH_API_KEY=replace-me

# Optional CA material/path understood by the configured adapter.
# THT_CA=/run/secrets/ca-chain.pem

# OIDC/Authentik references. Keep these fixed keys empty until OIDC is configured.
THT_OIDC_CLIENT_SECRET=
THT_AUTHENTIK_API_TOKEN=