# Self-hosted Renovate runtime secrets.
#
# FILL THESE IN. This file is SOPS-encrypted on commit by the .pre-commit hook
# (it matches the `.env` rule in .sops.yaml), and decrypted by kustomize-controller
# via flux-sops before the Secret is generated.

# Fine-grained/personal access token with read+writes:content and read:issues,
# read:pull_requests, and contents read/write on vhaudiquet/homeprod so Renovate
# can open and push PR branches.
RENOVATE_TOKEN=

# Optional: GitHub token used for public API rate-limit boosting (can be the
# same as RENOVATE_TOKEN, or a dedicated one).
GITHUB_COM_TOKEN=

# SOPS master key fingerprint used to (re-)encrypt values.yaml in this repo.
# Matches the `pgp:` entry in .sops.yaml.
SOPS_PGP_FP=DC6910268E657FF70BA7EC289974494E76938DDC