# op:// references only, resolved by the docs:deploy / docs:destroy mise tasks
# and .github/workflows/docs*.yml. Every item is readable by every env SA.

export AWS_ACCESS_KEY_ID="op://yucca_tf/TF_STATE_S3_ACCESS_KEY/password"
export AWS_SECRET_ACCESS_KEY="op://yucca_tf/TF_STATE_S3_SECRET_KEY/password"

# Minted by core-infra-tf cloudflare/futo-account-api-keys (futo_cloud_pages).
export CLOUDFLARE_API_TOKEN="op://shared_tf/FUTO_CLOUD_PAGES_CLOUDFLARE_API_TOKEN/password"
export CLOUDFLARE_ACCOUNT_ID="op://shared_tf/CLOUDFLARE_ACCOUNT_ID/password"
export TF_VAR_cloudflare_api_token="op://shared_tf/FUTO_CLOUD_PAGES_CLOUDFLARE_API_TOKEN/password"
export TF_VAR_cloudflare_account_id="op://shared_tf/CLOUDFLARE_ACCOUNT_ID/password"

# prod on main, dev for pull-request previews.
export TF_VAR_env=$ENVIRONMENT
