# Local Windows signing config — copy to .env.windows (gitignored) and fill in.
# Used by scripts/build-app-win.ps1 when running a signed local Windows build.
# CI uses GitHub Actions Secrets with the same names — see .github/workflows/release-windows.yml.

# Azure Trusted Signing — Microsoft.Trusted.Signing.Client + signtool
AZURE_TENANT_ID=
AZURE_CLIENT_ID=
AZURE_CLIENT_SECRET=
AZURE_SIGNING_ENDPOINT=https://wus2.codesigning.azure.net/
AZURE_SIGNING_ACCOUNT=mist-code-signing
AZURE_SIGNING_CERT_PROFILE=Mist-Windows-Signing

# Optional — only needed if signtool / dlib aren't auto-discovered
# SIGNTOOL_PATH=
# AZURE_SIGNING_DLIB=

# GitHub Releases publish (set if running build-app-win.ps1 -Publish)
GH_TOKEN=