# Required
OPNSENSE_API_KEY=your_api_key_here
OPNSENSE_API_SECRET=your_api_secret_here
OPNSENSE_HOST=https://your-opnsense.local

# Optional
OUTPUT_DIRECTORY=./certs

# Optional: disable SSL verification for self-signed certificates
# VERIFY_SSL=false

# Optional: file permissions (Linux only)
# FILE_OWNER=root
# FILE_GROUP=root
# FILE_MODE=0600