platon.env.example

# platon.env — SCOPED secrets for the Platon backend container ONLY.
#
# Replaces the previous `env_file: /root/.hermes/.env`, which injected the whole
# ecosystem's ~146 secrets (every LLM key, Telegram token, etc.) into Platon — so
# a single Platon compromise leaked everything. Put ONLY what Platon needs here.
#
# Deploy:
#   cp platon.env.example /root/.hermes/platon.env   # then fill in the value(s)
#   chmod 600 /root/.hermes/platon.env
#   docker compose up -d
# Override the path with PLATON_ENV_FILE if you keep it elsewhere.
#
# Non-secret config (models, URLs, ports, webhook) is already set in
# docker-compose.yml under `environment:` — do NOT duplicate it here.

# --- LLM provider key — set exactly ONE (matches PLATON_ORACLE_PROVIDER=auto) ---
# DeepSeek is the default provider (PLATON_DEEPSEEK_BASE_URL is preconfigured).
DEEPSEEK_API_KEY=
# OPENAI_API_KEY=
# ANTHROPIC_API_KEY=
# Platon also accepts the PLATON_-prefixed forms (e.g. PLATON_DEEPSEEK_API_KEY).

# --- Optional ---
# Federation hub admin token (only if Platon registers with a private hub).
# PLATON_HUB_ADMIN_TOKEN=
# Deterministic signing seed (base64). If unset, the key under /data is used.
# ORACLE_SIGNING_SEED_B64=