# Copy this file to .env and fill in your values
# NEVER commit .env to version control
# Copy to qa/.env in your project (or .env at the repo root); values never go in YAML.

# Target credentials (referenced by env var name in data/targets/*.yml)
# QA_USER=
# QA_PASS=

# Token-based auth
# QA_TOKEN=

# --- Backend verification (/qa-verify-backend) ---
# Target configs reference these by NAME only — values stay here, never in YAML.
# The AWS profile used for READ-ONLY probes. Never point this at production.
# QA_AWS_PROFILE=
# QA_AWS_REGION=
#
# API probes normally need NO credential here: the request runs inside the
# already-authenticated browser profile under .auth/ (gitignored). Set a token
# only for a target that declares `api.auth: bearer-env`.
# QA_API_TOKEN=
#
# A service with NO user interface has no browser session to inherit, so its key
# lives here and the target names the variable (`api.auth: api-key-env`,
# `api.token_env: EXAMPLE_API_KEY`, `api.header_name: X-Api-Key`).
# See data/targets/_example-api-only.yml.
# EXAMPLE_API_KEY=