# Copy to ~/.secrets.zsh and fill in. chmod 600. Never committed.
# Sourced at the end of zshenv, so non-interactive shells get these too.
#
# Back up edits by hand as ~/.secrets.zsh.pre-<thing>, matching the convention
# used across ~/config.

export LASTFM_API_KEY=""
export LASTFM_API_SECRET=""

# Read by the opencode profiles as {env:LITELLM_KEY}. opencode has no fallback
# syntax, so an unset value becomes an empty string and every request 401s.
export LITELLM_KEY=""

# Where the proxy lives. Mainframe talks to itself; every other machine uses
# the internal name, which has no public A record and is source-IP gated.
# export LITELLM_BASE="https://llm.rcjohnstone.com"