Re-add clean zshenv

.zsh_secrets.example

@@ -1,3 +1,24 @@
-#  .zsh_secrets
+# ~/.zsh_secrets
+#
+# Copy this file to ~/.zsh_secrets and fill in real values locally.
+# Do not commit real secrets.
 
-export TESTING_SECRET="HELLO THIS IS WORKING"
+# Core local values
+export AZURE_URL=""
+export VM_SUDO_PASS=""
+
+# API keys and tokens
+export TAOBAO_API_KEY=""
+export AZURE_OPENAI_API_KEY=""
+export OUTLINE_MOKU_TOKEN=""
+export DOKPLOY_API_KEY=""
+export N8N_AUTH=""
+export CONTEXT7_API_KEY=""
+export GITEA_ACCESS_TOKEN=""
+export NETDATA_TOKEN=""
+export OBSIDIAN_API_KEY=""
+
+# Optional overrides
+# export VAULT_ADDR="http://192.168.30.53:8200"
+# export OPENCHAMBER_HOST="0.0.0.0"
+# export PLANNOTATOR_PORT="9999"

.zshenv

@@ -1,31 +1,23 @@
 # ENV File
 
+# Load machine-local secrets before defining any derived environment variables.
+[ -f "$HOME/.zsh_secrets" ] && source "$HOME/.zsh_secrets"
+
 export GOGC=500
 
 # CodeGraphContext defaults
 export CGC_RUNTIME_DB_TYPE=kuzudb
 export KUZUDB_PATH="$HOME/.codegraphcontext/kuzudb"
 
-export PATH=/home/mangopig/.opencode/bin:$PATH
+export PATH="$HOME/.opencode/bin:$PATH"
-export OPENCHAMBER_HOST=0.0.0.0
+export OPENCHAMBER_HOST="${OPENCHAMBER_HOST:-0.0.0.0}"
-export AZURE_COGNITIVE_SERVICES_RESOURCE_NAME="$AZURE_URL"
+export VAULT_ADDR="${VAULT_ADDR:-http://192.168.30.53:8200}"
-export VAULT_ADDR="http://192.168.30.53:8200"
+export PLANNOTATOR_PORT="${PLANNOTATOR_PORT:-9999}"
-export OPENCHAMBER_UI_PASSWORD="$VM_SUDO_PASS"
-export AZURE_RESOURCE_NAME="$AZURE_URL"
-export PLANNOTATOR_PORT=9999
 
-# OpenCode Secrets
+# Derived environment variables that may depend on machine-local secrets.
-export TAOBAO_API_KEY="sk-BCjuuzYOkaR0L1lBpcqP4N9VWnIh6XoVWghltVjBvk5GQneL"
+[ -n "${AZURE_URL:-}" ] && export AZURE_COGNITIVE_SERVICES_RESOURCE_NAME="$AZURE_URL"
-export AZURE_OPENAI_API_KEY="6ebJTnqeDNv66eoYUmKscjb9bOmR1gE7vRcBnH9zLFnFT1Dy6a6XJQQJ99CBACfhMk5XJ3w3AAAAACOGDFaj"
+[ -n "${AZURE_URL:-}" ] && export AZURE_RESOURCE_NAME="$AZURE_URL"
-export FOUNDRY_ANTHROPIC_API_KEY="$AZURE_OPENAI_API_KEY"
+[ -n "${VM_SUDO_PASS:-}" ] && export OPENCHAMBER_UI_PASSWORD="$VM_SUDO_PASS"
-export CHROMA_OPENAI_API_KEY="$AZURE_OPENAI_API_KEY"
+[ -n "${AZURE_OPENAI_API_KEY:-}" ] && export FOUNDRY_ANTHROPIC_API_KEY="$AZURE_OPENAI_API_KEY"
-
+[ -n "${AZURE_OPENAI_API_KEY:-}" ] && export CHROMA_OPENAI_API_KEY="$AZURE_OPENAI_API_KEY"
-export OUTLINE_MOKU_TOKEN="ol_api_jZbStf5YaAxWlfT5fE79xgKPKW82cfUn8NaSK9"
+[ -n "${OUTLINE_MOKU_TOKEN:-}" ] && export OUTLINE_MOKU_AUTHORIZATION="Bearer $OUTLINE_MOKU_TOKEN"
-export OUTLINE_MOKU_AUTHORIZATION="Bearer $OUTLINE_MOKU_TOKEN"
-
-export DOKPLOY_API_KEY="CkiyeXRRImWOKeVkFAAfdoBjwHmbXoSKXNRWFwnhjKlhHnTkxBfVZDpvmXYAWgbQ"
-export N8N_AUTH="725ce955821a3f92c9e85d428cd157a890c6209f254a8d31edca41ddc4b8a324"
-export CONTEXT7_API_KEY="ctx7sk-3c4a0f0a-f9c4-4d45-a2a1-765f5dfa33ba"
-export GITEA_ACCESS_TOKEN="51bd8f571def772ed54a3e8317189abaa7d5a1e5"
-export NETDATA_TOKEN="67e9f974-be37-4bbd-9d1e-4541613fa119"
-export OBSIDIAN_API_KEY="360159f3b5b72953b3dd28ebd8e24215117e67478a7333bcc6c0e43a4bfc3720"