# --- Wave 45 dev-hub-restic — backup target & repo password ---
# Append to ~/.claude/secrets/.env (chmod 600). Per RULE 0.8 secrets-single-source.
#
# For Cloudflare R2:
#   RESTIC_REPOSITORY=s3:https://<account-id>.r2.cloudflarestorage.com/<bucket>
#   AWS_ACCESS_KEY_ID=<r2-access-key>
#   AWS_SECRET_ACCESS_KEY=<r2-secret>
# For BackBlaze B2 (S3-compat):
#   RESTIC_REPOSITORY=s3:https://s3.us-west-002.backblazeb2.com/<bucket>
#   AWS_ACCESS_KEY_ID=<b2-key-id>
#   AWS_SECRET_ACCESS_KEY=<b2-app-key>
# For AWS S3:
#   RESTIC_REPOSITORY=s3:https://s3.<region>.amazonaws.com/<bucket>
#   AWS_ACCESS_KEY_ID=...
#   AWS_SECRET_ACCESS_KEY=...
#
# Repo password (generate: openssl rand -base64 32):
RESTIC_REPOSITORY=
RESTIC_PASSWORD=
AWS_ACCESS_KEY_ID=
AWS_SECRET_ACCESS_KEY=