env.example

# Session secret for flash messages and cookies
SESSION_SECRET=your-super-secret-session-key-here

# Resend API key for sending emails
# Get your API key from https://resend.com/api-keys
RESEND_API_KEY=re_your_resend_api_key_here

# Cloudflare Turnstile CAPTCHA keys
# Get your keys from https://dash.cloudflare.com/profile/api-tokens
# Then go to Turnstile section to create a site
# Note: In development (localhost), test keys are used automatically
TURNSTILE_SITE_KEY=0x4AAAAAAABkMYinukE8nzY
TURNSTILE_SECRET_KEY=0x4AAAAAAABkMYinukE8nzY

# Google AI API key
GEMINI_API_KEY=your_gemini_api_key_here

# Sanity CMS configuration
# Get these from https://sanity.io/manage
# Note: These use VITE_ prefix to be available in the browser
VITE_SANITY_PROJECT_ID=your_sanity_project_id
VITE_SANITY_DATASET=production

SANITY_STUDIO_APP_SITE_URL=https://loke.dev

# Sanity write token
SANITY_WRITE_TOKEN=your_sanity_write_token_here

# Vercel Cron + manual: curl -H "Authorization: Bearer $CRON_SECRET" https://loke.dev/api/seshat/worker
CRON_SECRET=generate_a_long_random_string

# Vercel ISR on-demand revalidation token (used by @astrojs/vercel isr.bypassToken)
VERCEL_ISR_BYPASS_TOKEN=your_vercel_isr_bypass_token_here

# Webhook auth secrets
# SANITY_WEBHOOK_SECRET: set as the Sanity webhook "Secret" value for signature validation
# REVALIDATE_WEBHOOK_SECRET: optional fallback secret for manual calls with Authorization / x-revalidate-secret
SANITY_WEBHOOK_SECRET=your_sanity_webhook_secret_here
REVALIDATE_WEBHOOK_SECRET=your_revalidate_webhook_secret_here

# Optional delay (ms) before revalidating after a signed Sanity webhook
# Helps avoid stale reads when Sanity CDN propagation is still in-flight
SANITY_WEBHOOK_REVALIDATE_DELAY_MS=1200

# GitHub (public API; token optional for higher rate limits)
GITHUB_OWNER=loke-dev
GITHUB_REPO=loke.dev
GITHUB_TOKEN=