# Copy to .env and fill in. .env is gitignored.

# ── Required ───────────────────────────────────────────────────────────
# Cloudflare API token with: Access Apps+Policies Edit, IdPs Read,
# Workers R2 Storage Edit, Zone Read. Create at:
#   https://dash.cloudflare.com/profile/api-tokens
CF_API_TOKEN=

# Web terminal hostname. Must be a subdomain of a zone you own on Cloudflare.
HOSTNAME=term.example.com

# Email allowed to log in (Cloudflare Access policy).
ALLOWED_EMAIL=you@example.com

# Hostname where Nerd Font files will be served from R2.
# Can be the same zone as HOSTNAME, or a different one.
FONTS_HOSTNAME=fonts.example.com

# ── Optional (sensible defaults) ──────────────────────────────────────
# Existing cloudflared tunnel name. Blank = auto-detect (only works if you have one).
TUNNEL_NAME=

# Login shell the web terminal drops you into. Blank = your $SHELL.
# You then run tmux yourself (or auto-attach via your shell rc — see CLAUDE.md Phase 6).
LOGIN_SHELL=

# tmux session name used by the optional auto-attach snippet / suggested in the
# final message. Not attached automatically anymore.
TMUX_SESSION=web

# R2 bucket name.
R2_BUCKET=term-fonts

# Access app + policy naming.
ACCESS_APP_NAME=
ACCESS_POLICY_NAME=allow-owner
SESSION_DURATION=24h

# ttyd local bind port.
TTYD_PORT=7681

# Nerd Font.
# Where to find JetBrainsMonoNerdFont-Regular.ttf and -Bold.ttf.
FONT_DIR=
FONT_FAMILY_DISPLAY_NAME=JetBrainsMono Nerd Font