# CertAuth Environment Variables
# Copy this to .env and fill in your real values

# Admin web login password
ADMIN_PASS=your-secure-admin-password

# YubiKey 1 (Root CA) credentials
YK_ROOT_PIN=your-yk1-pin
YK_ROOT_PUK=your-yk1-puk

# YubiKey 2 (Intermediate CA) credentials
YK_INT_PIN=your-yk2-pin
YK_INT_PUK=your-yk2-puk

# JWT signing secret (generate with: python3 -c "import secrets; print(secrets.token_hex(32))")
JWT_SECRET=your-64-char-hex-secret

# PFX download password
PFX_PASS=certauth