# Required platform secrets
CAP_ADMIN_KEY=replace-with-a-long-random-admin-key
CAP_PRODUCTION_APPROVAL_TOKEN=replace-with-a-separate-long-random-token
CAP_SECRET_KEY=replace-with-a-valid-fernet-key
# Generate with: python -c "from cryptography.fernet import Fernet; print(Fernet.generate_key().decode())"

CAP_DATABASE_PATH=data/control-plane.db
CAP_DATA_ROOT=data/domains
CAP_HTTP_ALLOWLIST=
CAP_ALLOW_PRIVATE_HTTP=false
CAP_MAX_HTTP_RESPONSE_BYTES=1048576
CAP_HTTP_TIMEOUT_SECONDS=10

# Optional Ed25519 bundle signing keys
CAP_BUNDLE_PRIVATE_KEY_B64=
CAP_BUNDLE_PUBLIC_KEY_B64=