Move hardcoded secrets to .env, add .env.example

Castopod password, DB password, BunnyCDN keys, Postiz JWT/IDs,
and monitoring token all moved to environment variables.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

publish_episode.py

@@ -55,8 +55,8 @@ load_dotenv(Path(__file__).parent / ".env")
 
 # Configuration
 CASTOPOD_URL = "https://podcast.macneilmediagroup.com"
-CASTOPOD_USERNAME = "admin"
-CASTOPOD_PASSWORD = "podcast2026api"
+CASTOPOD_USERNAME = os.getenv("CASTOPOD_USERNAME", "admin")
+CASTOPOD_PASSWORD = os.getenv("CASTOPOD_PASSWORD")
 PODCAST_ID = 1
 PODCAST_HANDLE = "LukeAtTheRoost"
 OPENROUTER_API_KEY = os.getenv("OPENROUTER_API_KEY")
@@ -74,25 +74,14 @@ YT_PODCAST_PLAYLIST = "PLGq4uZyNV1yYH_rcitTTPVysPbC6-7pe-"
 
 # Postiz (social media posting)
 POSTIZ_URL = "https://social.lukeattheroost.com"
-POSTIZ_JWT_SECRET = "9d499bab97b303506af6ae18b29a60e6b5a0b1049177f533232ad14dd9729814"
-POSTIZ_USER_ID = "00c14319-9eac-42c3-a467-68d3c1634fe1"
-POSTIZ_INTEGRATIONS = {
-    "facebook": {"id": "cmll9hwqj0001mt6xnas2f17w"},
-    "instagram": {"id": "cmlljn8920001pk6qqzutqwik"},
-    "discord": {"id": "cmllkprk90001uc6v6fwd5y9p", "channel": "1471386314447519754"},
-    "bluesky": {"id": "cmlk29h780001p76qa7sstp5h"},
-    "mastodon": {"id": "cmlk2r3mf0001le6vx9ey0k5a"},
-    "nostr": {"id": "cmlll3y78000cuc6vh8dcpl2w"},
-    "linkedin": {"id": "cmluar6cn0004o46x5a1u07vc"},
-    "threads": {"id": "cmm13sxhq001mo46x24com5p7"},
-    # TikTok excluded — requires video, not image posts. Use upload_clips.py instead.
-    # "tiktok": {"id": "cmm2ggsno0001md7134cam9t9"},
-}
+POSTIZ_JWT_SECRET = os.getenv("POSTIZ_JWT_SECRET")
+POSTIZ_USER_ID = os.getenv("POSTIZ_USER_ID")
+POSTIZ_INTEGRATIONS = json.loads(os.getenv("POSTIZ_INTEGRATIONS", "{}"))
 
 # NAS Configuration for chapters upload
 # BunnyCDN Storage
 BUNNY_STORAGE_ZONE = "lukeattheroost"
-BUNNY_STORAGE_KEY = "92749cd3-85df-4cff-938fe35eb994-30f8-4cf2"
+BUNNY_STORAGE_KEY = os.getenv("BUNNY_STORAGE_KEY")
 BUNNY_STORAGE_REGION = "la"  # Los Angeles
 
 NAS_HOST = "mmgnas"
@@ -102,7 +91,7 @@ DOCKER_PATH = "/share/CACHEDEV1_DATA/.qpkg/container-station/bin/docker"
 CASTOPOD_CONTAINER = "castopod-castopod-1"
 MARIADB_CONTAINER = "castopod-mariadb-1"
 DB_USER = "castopod"
-DB_PASS = "BYtbFfk3ndeVabb26xb0UyKU"
+DB_PASS = os.getenv("CASTOPOD_DB_PASS")
 DB_NAME = "castopod"
 
 LOCK_FILE = Path(__file__).parent / ".publish.lock"