# deploy.sh and release.sh read deploy/local.env, if there is one, for what it is not
# given on the command line.
KNOTLESS_HOST=root@203.0.113.10
KNOTLESS_DOMAIN=example.com
# Repositories' sites, on a domain of their own, its apex and wildcard
# pointing here, and the zone's Cloudflare token (Zone:Read and DNS:Edit
# on it alone), which setup.sh needs once for its certificate:
# KNOTLESS_PAGES_DOMAIN=example.page
# KNOTLESS_PAGES_DNS_TOKEN=<token>
# The iOS app's notifications: the id of the key from Apple and its team,
# with the key itself at $KNOTLESS_DATA/apns.p8 on the host.
# KNOTLESS_APNS_KEY_ID=ABC123DEFG
# KNOTLESS_APNS_TEAM=ABC123DEFG
# KNOTLESS_PROXY_NETWORK=knotless
# KNOTLESS_DATA=/var/lib/knotless
# The accounts, by DID and comma-separated, that operate it: takedowns,
# reports and usage, with `knotless admin`.
# KNOTLESS_ADMIN_DIDS=did:plc:...
# knotless-run, watching these repositories, as this account:
# KNOTLESS_RUN_REPOS="alice.example.com/tally"
# KNOTLESS_RUN_IDENTIFIER=ci.example.com
# KNOTLESS_RUN_PASSWORD=<app password>
# KNOTLESS_RUN_DATA=/var/lib/knotless-run
# KNOTLESS_RUN_ARGS="--pulls"
# The runner host, for other people's code (deploy/runner-host/README.md):
# KNOTLESS_RUNNER_HOST=root@203.0.113.20
# Its account's DID, for knotless.dev to name it for new repositories, once
# it runs (deploy.sh):
# KNOTLESS_DEFAULT_RUNNER_DID=did:plc:…
# It finds the repositories naming its account; these are watched besides:
# KNOTLESS_RUNNER_REPOS="alice.example.com/tally"
# KNOTLESS_RUNNER_IDENTIFIER=runner.example.com
# KNOTLESS_RUNNER_PASSWORD=<app password>
# Where it logs in with OAuth, for private repositories, and its DID, the
# one bot that may (deploy/runner-host/README.md, Private repositories):
# KNOTLESS_RUNNER_DOMAIN=runner.example.com
# KNOTLESS_RUNNER_DID=did:plc:…