credentials.example.yaml

# Pinard credentials — copy to ~/.config/pinard/credentials.yaml and fill in your values.
# See docs/ for setup instructions.

gitlab:
  host: gitlab.example.com          # GitLab API hostname (no scheme)
  user: your-bot-user               # GitLab username of the Pinard service account
  token_env: PINARD_GITLAB_TOKEN    # env var holding the service account API token
  # owner_token_env: PINARD_OWNER_GITLAB_TOKEN  # optional: operator's token for owner-attributed calls
  ssh_key: ~/.ssh/pinard_id_ed25519 # SSH key used by git push (pinard committer)
  git_name: Pinard
  git_email: bot@example.com        # committer email shown in git log

nats:
  url: wss://nats.example.com       # NATS JetStream WebSocket URL
  user: your-nats-user              # NATS username
  password_env: PINARD_NATS_PASSWORD # env var holding the NATS password

# Optional: Engram cloud replication
# engram:
#   server: https://engram.example.com
#   cloud_token_env: ENGRAM_CLOUD_TOKEN

# Optional: Mnemosyne capsule funding (required when aoc is built with -tags capsule)
# Set PINARD_MNEMOSYNE_URL in ~/.config/pinard/env on the host running `aoc daemon`:
#   PINARD_MNEMOSYNE_URL=https://mnemosyne.example.com

# Optional: web terminal access
# webterm:
#   base_url: https://pinard.example.com
#   link_secret_env: PINARD_WEBTERM_LINK_SECRET
#   grant_secret_env: PINARD_WEBTERM_GRANT_SECRET
#   post_links: true
#   auth:
#     issuer: https://cognito-idp.us-east-1.amazonaws.com/us-east-1_YourPoolId
#     client_id: your-cognito-client-id
#     cookie_secret_env: PINARD_WEBTERM_COOKIE_SECRET