.env.example

# Build signing secrets (sourced by build.sh / build.cmd)
# Copy this file to .env and fill in your values.

# ── Apple (macOS / Mac App Store) ───────────────────────────
# Code signing identity (from `security find-identity -v -p basic`)
# For the Mac App Store use: "3rd Party Mac Developer Application: <Name> (<TEAM>)"
# For direct distribution use: "Developer ID Application: <Name> (<TEAM>)"
SIGNING_IDENTITY="3rd Party Mac Developer Application: Your Name (TEAMID1234)"

# Apple Distribution certificate (used for MAS signing)
APPLE_DIST_CERT="Apple Distribution: Your Name (TEAMID1234)"

# Apple notarization Apple ID credentials
APPLE_ID="your@appleid.com"
APPLE_TEAM_ID="TEAMID1234"
APPLE_APP_PASSWORD="xxxx-xxxx-xxxx-xxxx"

# App Store Connect API key (for `altool --upload-app`). Create at:
#   https://appstoreconnect.apple.com/access/integrations/api
# The .p8 private key file is NOT stored here; keep it as a GitHub secret
# (APPLE_API_KEY_P8, base64) and in ~/private_keys on the build machine.
APPLE_API_KEY=""
APPLE_API_ISSUER=""

# Mac App Store provisioning profile (base64) — embedded into the MAS build.
MAS_PROVISIONING_PROFILE=""

# Bundle identifier (must match the provisioning profile's App ID suffix)
# e.g. "diskraptor" -> application-identifier "TEAMID1234.diskraptor"
BUNDLE_ID="diskraptor"

# macOS keychain password (so codesign can run without GUI prompts)
KEYCHAIN_PASSWORD=""

# ── Windows ─────────────────────────────────────────────────
# Code signing certificate (signtool)
SIGNTOOL_CERT_PATH="/path/to/certificate.pfx"
SIGNTOOL_PASSWORD=""

# GitHub Personal Access Token (for release upload)
GITHUB_TOKEN="ghp_xxxxxxxxxxxxxxxxxxxx"