secrets.env.example

# secrets.env.example
#
# Copy this file to secrets.env (gitignored) and fill in your op:// paths.
# Then run the app with: op run --env-file=secrets.env -- next dev
#
# op:// paths follow the format: op://vault/item/field
#
# Non-secret params (GCP project IDs, Grafana datasource UIDs, log names, Loki
# selectors) live plainly in projects.json — no need to reference them here.
# Only true secrets (tokens, API keys) belong in this file.

# Google Cloud Logging
# No secrets needed if using Application Default Credentials (ADC).
# ADC automatically uses your gcloud login or workload identity.
# Run `gcloud auth application-default login` once to set up ADC locally.

# Axiom
AXIOM_TOKEN=op://Personal/Axiom/token

# Grafana Loki (if a token is required — see docs/architecture/auth.md)
# GRAFANA_TOKEN=op://Personal/Grafana/token