.env.example

# LLM providers - used by offline extraction tooling, not by the web app.
OPENAI_API_KEY=
GEMINI_API_KEY=
DEEPSEEK_API_KEY=

# Azure OpenAI.
#   AZURE_OPENAI_ENDPOINT is the bare resource host, e.g.
#   "https://<resource>.services.ai.azure.com/". The code appends "/openai/v1/"
#   itself (_azure_base_url in explainshell/extraction/llm/providers/openai.py),
#   so do not include a path - ".../openai/v1/responses" makes every call 404.
#   Set AZURE_OPENAI_BASE_URL instead to supply a fully-qualified base URL
#   verbatim; it takes precedence over AZURE_OPENAI_ENDPOINT.
#
#   In --mode llm:azure/<name>, <name> is the *deployment* name, which need not
#   match the model name (e.g. a gpt-5 deployment may be called "gpt-5-2").
#   Requesting a name that is not deployed returns 404; a deployment that exists
#   but is disabled returns 400 "operation not allowed in this deployment".
AZURE_OPENAI_API_KEY=
AZURE_OPENAI_ENDPOINT=

# Cloudflare API token (read-only) - for querying live zone config.
CF_API_TOKEN=

# DigitalOcean App Platform app id - required by `make deploy-local`.
DO_APP_ID=

# Datadog - prod log ingestion (App Platform log forwarding); also needed by
# `make deploy-local` so envsubst doesn't blank the token in the rendered spec.
DATADOG_API_KEY=
# Datadog application key - management API access (Synthetics uptime checks,
# monitors, log queries). Used with DATADOG_API_KEY; local tooling only, not CI.
DATADOG_APP_KEY=