# Copy to .env and fill in. Referenced by `env_file:` in config.yaml and
# expanded into ${VAR} placeholders there. .env is gitignored; this file is not.
# Never commit real values.
#
# Not required by the local commands — `plan`, `doctor` without `--remote`, and
# `--version` never open this file or contact Tailscale.
#
# Create an OAuth client at https://login.tailscale.com/admin/settings/oauth.
# It must be org-level and able to create tailnets (tailbench calls
# /api/v2/organizations/-/tailnets), plus write auth keys, the policy file, and
# devices. Tailbench creates and deletes real tailnets, so use disposable org
# credentials.
OAUTH_CLIENT_ID=
OAUTH_CLIENT_SECRET=

# Only needed when config.yaml sets `state_backend: pulumi.com`. The Pulumi CLI
# inherits this from tailbench's environment, so an entry here is enough — no
# separate `pulumi login` required. Create one at
# https://app.pulumi.com/account/tokens
# PULUMI_ACCESS_TOKEN=