From 833f2365f15973a2dc3d845e66222f28040486db Mon Sep 17 00:00:00 2001
From: Frank <frank@dankware>
Date: Fri, 21 Aug 2026 16:00:16 -0700
Subject: [PATCH] env: add Porkbun API token placeholders (DNS-01 cert
 issuance)

Real tokens live only in the host .env files (git-ignored):
- /home/dank/serverAppConfigs/dankclaw/.env
- /home/dank/serverAppConfigs/dankserver/.env

Token is scoped to the franksdank.cloud zone (DNS read/write).
---
 dankclaw/.env.example   | 5 +++++
 dankserver/.env.example | 5 +++++
 2 files changed, 10 insertions(+)

diff --git a/dankclaw/.env.example b/dankclaw/.env.example
index b4612b0..efa5081 100644
--- a/dankclaw/.env.example
+++ b/dankclaw/.env.example
@@ -34,3 +34,8 @@ OPENAI_API_KEY=not-needed
 SIGNAL_ACCOUNT=+15551234567
 # Comma-separated E.164 numbers allowed to message the agent.
 SIGNAL_ALLOWED_USERS=+15551234567
+
+# Porkbun API (franksdank.cloud zone). Caddy uses these for DNS-01
+# Let's Encrypt wildcard cert issuance. Scope the token to this zone only.
+PORKBUN_API_KEY=changeme
+PORKBUN_API_SECRET=changeme
diff --git a/dankserver/.env.example b/dankserver/.env.example
index 6a6f4d1..30d0c98 100644
--- a/dankserver/.env.example
+++ b/dankserver/.env.example
@@ -22,3 +22,8 @@ JELLYFIN_PUBLISH_SERVER_URL=http://192.168.0.235:8096
 
 # *arr Stack
 ARR_TZ=America/New_York
+
+# Porkbun API (franksdank.cloud zone). Caddy uses these for DNS-01
+# Let's Encrypt wildcard cert issuance. Scope the token to this zone only.
+PORKBUN_API_KEY=changeme
+PORKBUN_API_SECRET=changeme