# =============================================================================
#  ~/.zshrc.local — API keys and secrets (EXAMPLE)
#  ===== THIS FILE IS OPTIONAL =====
#  The recommended approach is to store all secrets in Bitwarden and load
#  them via bw-env.sh. See config/scripts/bw-env.sh for setup.
#
#  If you prefer a plain file, copy this to ~/.zshrc.local and fill in
#  your real keys. Then uncomment the "source ~/.zshrc.local" line in .zshrc.
#
#  DO NOT commit this file to version control.
# =============================================================================
#  From the Pop machine audit, Julian stores ~17 API keys in his env.
#  Using Bitwarden (bw-env.sh) is the recommended approach because:
#    - Keys are encrypted at rest (not in dotfiles)
#    - Syncs across machines automatically
#    - One source of truth
#    - Cache falls back silently if vault is locked
# =============================================================================

# ---- AI API Keys ----
export GROQ_API_KEY="gsk_your_key_here"
export ANTHROPIC_API_KEY="sk-ant-your-key-here"
export GOOGLE_API_KEY="AIza-your-key-here"
export OPENCODE_API_KEY="sk-your-key-here"

# ---- LiteLLM Proxy ----
export OPENAI_BASE_URL="https://ai.julianprester.com"
export OPENAI_API_KEY="sk-your-key-here"

# ---- Calendar (CalDAV) ----
export CALDAV_URL="https://nc.julianprester.com/remote.php/dav"
export CALDAV_USERNAME="julian.prester@sydney.edu.au"
export CALDAV_PASSWORD="your-password-here"

# ---- Thunderbird API ----
export TB_API_HOSTS="thunderbird"

# ---- Zotero ----
export ZOTERO_KEY=""

# ---- Canvas LMS ----
export CANVAS_API_KEY="3156~your-key-here"
export CANVAS_API_URL="https://canvas.sydney.edu.au/"

# ---- Nextcloud ----
export NC_URL="https://nc.julianprester.com"
export NC_USERNAME="julian.prester@sydney.edu.au"
export NC_PASSWORD="your-password-here"

# ---- Actual Budget ----
export ACTUAL_URL="https://actual.your-domain.ts.net"
export ACTUAL_PASSWORD="your-password-here"
export ACTUAL_SYNC_ID="your-sync-id-here"

# ---- Tavily (web search API) ----
export TAVILY_API_KEY="tvly-your-key-here"

# ---- FreshRSS ----
export FRESHRSS_API_KEY="your-key-here"

# ---- Semantic Scholar ----
export SEMANTIC_SCHOLAR_API_KEY="your-key-here"

# ---- OpenAlex ----
export OPENALEX_API_KEY="your-key-here"