secrets.env.example

# Copy to secrets.env (gitignored) and fill in. Injected into the VM only at
# launch time by ./vibe — never written into the image or a snapshot.
# Use a SCOPED / low-privilege key, not your everyday one.
ANTHROPIC_API_KEY=sk-ant-...

# Optional: use a custom endpoint (e.g. an LLM gateway). EVERY variable set in
# this file is forwarded into the VM at launch.
#   - The gateway's domain must be in the egress allowlist (./allowlist) — but
#     ./vibe auto-allows the ANTHROPIC_BASE_URL host for direct egress, so you
#     usually don't need to add it by hand.
#   - Set an auth credential (ANTHROPIC_AUTH_TOKEN or ANTHROPIC_API_KEY = your
#     gateway key), or Claude falls back to OAuth /login against platform.claude.com.
#     Custom headers alone are NOT treated as authentication.
# ANTHROPIC_BASE_URL=https://llm-gateway.example.com
# ANTHROPIC_AUTH_TOKEN=sk-...                 # gateway key (sent as Bearer)
# ANTHROPIC_CUSTOM_HEADERS=x-foo: bar         # extra headers, if your gateway needs them

# Optional: credentials for a Nexus repository mirror, only needed if you set
# NEXUS_MAVEN_URL in vibevm.conf and that mirror requires auth. Maven/Gradle read
# them from the env at build time; never written to the VM disk. Leave unset for
# an anonymous mirror or when no mirror is configured.
# NEXUS_USERNAME=your-nexus-user
# NEXUS_PASSWORD=your-nexus-token