#!/bin/bash # TEMPLATE ONLY — real values lived in *SECRETS.inc which were EXCLUDED from # this port after a secret-scan (Nitrokey SO PIN + USER PIN; see #783). # Populate at deploy time from ~/.creds or the secrets store — never commit. export SECRET_SOPIN="" export SECRET_USER_PIN=""