# MessageWeave production bootstrap (C-REDIS-ONLY-STATE)
#
# The process requires only this environment variable. Redis ACL credentials are
# both the application connection credential and the one-shot bootstrap trust root.
# Never commit or log a real URL/password.
REDIS_URL=redis://:REPLACE_WITH_REDIS_ACL_PASSWORD@redis.example.com:6379/0
# Required 32-byte random hex key (64 hex characters). Never store in Redis or logs.
CONFIG_ENCRYPTION_KEY=REPLACE_WITH_64_HEX_CHAR_RANDOM_KEY

# PORT/RUN_MODE are optional platform overrides (defaults: 8080/webhook). Business
# secrets (Telegram/JMAP/LLM/auth) must be supplied once via HTTPS /api/bootstrap;
# they are then persisted in Redis and are never echoed by the API.