.env.example

# Resend API key for sending emails
# Get your API key from https://resend.com/api-keys
RESEND_API_KEY=re_your_resend_api_key_here

# Cloudflare Turnstile CAPTCHA keys
# Get your keys from https://dash.cloudflare.com/profile/api-tokens
# Then go to Turnstile section to create a site
# Note: In development (localhost), test keys are used automatically
TURNSTILE_SITE_KEY=0x4AAAAAAABkMYinukE8nzY
TURNSTILE_SECRET_KEY=0x4AAAAAAABkMYinukE8nzY

# Google AI API key
GEMINI_API_KEY=your_gemini_api_key_here

# Sanity CMS configuration
# Get these from https://sanity.io/manage
# Note: These use VITE_ prefix to be available in the browser
VITE_SANITY_PROJECT_ID=l25uat4p
VITE_SANITY_DATASET=production

SANITY_STUDIO_APP_SITE_URL=https://loke.dev

# Sanity write token
SANITY_WRITE_TOKEN=your_sanity_write_token_here

# Read-only Sanity token used only by the server for secure Studio draft previews.
# Create it with the Viewer role. Never expose it with a VITE_ prefix.
SANITY_API_READ_TOKEN=your_sanity_viewer_token_here

# Cloudflare Cron Trigger + manual: curl -H "Authorization: Bearer $CRON_SECRET" https://loke.dev/api/seshat/worker
CRON_SECRET=generate_a_long_random_string

# Cloudflare cache purge for Sanity webhook revalidation
CLOUDFLARE_ZONE_ID=your_cloudflare_zone_id
CLOUDFLARE_API_TOKEN=your_cloudflare_cache_purge_api_token
CLOUDFLARE_PURGE_HOSTS=loke.dev,www.loke.dev

# Webhook auth secrets
# SANITY_WEBHOOK_SECRET: set as the Sanity webhook "Secret" value for signature validation
# REVALIDATE_WEBHOOK_SECRET: optional fallback secret for manual calls with Authorization / x-revalidate-secret
SANITY_WEBHOOK_SECRET=your_sanity_webhook_secret_here
REVALIDATE_WEBHOOK_SECRET=your_revalidate_webhook_secret_here

# Optional delay (ms) before revalidating after a signed Sanity webhook
# Helps avoid stale reads when Sanity CDN propagation is still in-flight
SANITY_WEBHOOK_REVALIDATE_DELAY_MS=1200

# GitHub deploy trigger for Sanity content updates (used by /api/revalidate)
# Create a fine-grained PAT with Contents: Read and Actions: Write on this repo
# Set on the Cloudflare Worker (wrangler secret put GITHUB_DEPLOY_TOKEN)
GITHUB_DEPLOY_TOKEN=your_github_pat_with_actions_write
GITHUB_OWNER=loke-dev
GITHUB_REPO=loke.dev

# GitHub (public API; token optional for higher rate limits on /changelog)
GITHUB_TOKEN=