.backup.env.example

# hosksaid backup credentials — Cloudflare R2. GITIGNORED. chmod 600.
#
#   cp .backup.env.example .backup.env && chmod 600 .backup.env
#
# Uses its OWN bucket (separate bucket per app), in the same R2 account as
# cardano402 (cardano402-backup) and tubechat (tubechat-backup).
#
#   1. Create a bucket "hosksaid-backup" in Cloudflare R2.
#   2. R2 > Manage R2 API Tokens > Create > "Object Read & Write" for that bucket.
#      That gives you an Access Key ID + Secret Access Key; your Account ID is in
#      the endpoint shown (https://<ACCOUNT_ID>.r2.cloudflarestorage.com).
#
# RESTIC_REPOSITORY format for R2 (repo at the bucket root, like cardano402):
RESTIC_REPOSITORY=s3:https://<ACCOUNT_ID>.r2.cloudflarestorage.com/hosksaid-backup

# !!! SAVE THIS PASSWORD IN YOUR PASSWORD MANAGER (LastPass, like cardano402) !!!
# Without it the backups are PERMANENTLY UNRECOVERABLE.
RESTIC_PASSWORD=

# R2 API token credentials (S3-compatible):
AWS_ACCESS_KEY_ID=<R2_ACCESS_KEY_ID>
AWS_SECRET_ACCESS_KEY=<R2_SECRET_ACCESS_KEY>

# Uncomment only if restic complains about the region:
# AWS_DEFAULT_REGION=auto