# Copy to .env.release (gitignored) and fill in.
# Consumed by scripts/release.mjs.
#
# electron-updater hash-verifies via SHA-512 embedded in latest.yml, so no
# minisign / Tauri signing key is needed any more — the legacy
# TAURI_SIGNING_* vars from the Tauri build can be removed once you've
# stopped publishing Tauri releases to this host.

# Host serving latest.yml + installer artifacts over HTTPS.
# NOTE: during the .cloud→.de transition the new VPS must ALSO serve the same
# artifacts under update.netralax.cloud (point its DNS at the new IP) so that
# already-installed clients — which have update.netralax.cloud baked in — can
# still pull the release that switches them over to .de.
UPDATE_HOST=update.netralax.de

# SSH user on UPDATE_HOST with write access to UPDATE_REMOTE_PATH.
UPDATE_SSH_USER=chatapp-deploy

# Optional: path to the SSH private key. Omit to fall back on ssh-agent or the
# default id_rsa.
UPDATE_SSH_KEY=

# Absolute path on the server where windows/ artifacts + latest.json live.
UPDATE_REMOTE_PATH=/var/www/updates/windows