# Meta app secret, not the WhatsApp access token. Keep out of source control.
WHATSAPP_APP_SECRET=
# Absolute path to your securely mounted RSA private key (do not put key contents here).
WHATSAPP_FLOWS_PRIVATE_KEY_PATH=
WHATSAPP_FLOWS_KEY_PASSPHRASE=
# Explicitly approved public HTTPS image CDN origins, comma separated. No paths or wildcards.
# Use public image CDNs only, never internal services. Redirects are not followed.
WHATSAPP_FLOWS_IMAGE_ORIGINS=https://images.example.com