# === Required ===

# Telegram bot token from @BotFather
TELEGRAM_BOT_TOKEN=your_bot_token_here

# Comma-separated Telegram user IDs allowed to use the bot (get yours from @userinfobot).
# The bot executes SSH commands, so it refuses to start without an allowlist.
ALLOWED_TELEGRAM_USER_IDS=123456789

# === Default SSH server (optional — servers can also be added via /addserver) ===

SSH_HOST=your_ssh_host
SSH_USERNAME=your_username
# Either a password...
SSH_PASSWORD=your_password
# ...or a path to a private key file (on the machine running the bot)
# SSH_PRIVATE_KEY_PATH=/path/to/private/key
# SSH_PORT=22
# Pin the default server's host key so it survives restarts (otherwise it's
# trust-on-first-use). Format: SHA256:<base64>. Find it with:
#   ssh-keyscan -t ed25519 your_host | ssh-keygen -lf -
# SSH_HOST_KEY_FINGERPRINT=SHA256:xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

# === AI features (optional — enables voice commands and smarter suggestions) ===

# OPENAI_API_KEY=sk-...
# OPENAI_MODEL=gpt-4o-mini
# Pin the voice-transcription language (ISO-639-1, e.g. en, ru). Empty = auto-detect.
# WHISPER_LANGUAGE=