# copy to .dev.vars (git-ignored) for local dev, and set the same in
# `wrangler secret put` / Cloudflare project settings for prod.

# admin panel (/admin)
ADMIN_PASSWORD=
# 32+ random bytes, e.g. `openssl rand -hex 32`
SESSION_SECRET=

# music widget — now playing + weekly scrobble stats from last.fm. reads a PUBLIC
# profile, so just a key (last.fm/api/account/create) + your username. no auth.
LASTFM_API_KEY=
LASTFM_USER=

# (legacy) spotify — no longer used; the music widget is on last.fm now.
# SPOTIFY_CLIENT_ID=
# SPOTIFY_CLIENT_SECRET=
# SPOTIFY_REFRESH_TOKEN=

# currently-reading widget — personal token from https://hardcover.app/account/api
HARDCOVER_TOKEN=

# "the counter" — all-time pageviews + visitors from Umami. needs the website id
# plus EITHER an api key OR a share-url id. leave all blank to hide the block.
UMAMI_WEBSITE_ID=
# api base — default is Umami Cloud; self-hosted: https://<your-host>/api
UMAMI_URL=
# mode A: an api key (Umami Cloud account → api keys)
UMAMI_API_KEY=
# mode B (no key): enable "Share URL" on the website, put its id here
UMAMI_SHARE_ID=