# Copy to `.env` (gitignored) and fill in. Two consumers:
#
# 1. k8s/kind path (tilt up): kustomize's secretGenerator in
#    ctrl/k8s/base/kustomization.yaml reads this file and builds the
#    nvi-secrets Secret. Non-secret config (DATABASE_URL, NVI_DATASET,
#    *_MODEL, LANGFUSE_HOST, ...) lives in configmap.yaml — do not
#    duplicate those here.
# 2. docker-compose fallback (ctrl/docker-compose.yml): compose reads
#    the same file via the shell.

# LLM API keys — set the one(s) matching your active LLM_PROVIDER.
GROQ_API_KEY=
ANTHROPIC_API_KEY=
# vLLM and other OpenAI-compatible self-hosted endpoints ignore auth;
# the literal placeholder is fine.
OPENAI_API_KEY=vllm-no-auth

# Langfuse (nivii project on the lng cluster). Both keys are project-
# scoped. Public key is safe by design; bundled for uniformity.
LANGFUSE_PUBLIC_KEY=
LANGFUSE_SECRET_KEY=