# Team secrets — encrypted via vault, safe to commit
# Set secrets with: ce vault set <KEY> <VALUE>
# Values stored as CENV_ENC[...] are encrypted at rest

# Database credentials
# DB_USER=CENV_ENC[...]
# DB_PASSWORD=CENV_ENC[...]
# DB_HOST=CENV_ENC[...]

# Redis
# REDIS_HOST=CENV_ENC[...]

# Auth
# JWT_SECRET=CENV_ENC[...]

# Storage
# S3_BUCKET=CENV_ENC[...]
# S3_ACCESS_KEY=CENV_ENC[...]
# S3_SECRET_KEY=CENV_ENC[...]