From 9cc41a43e1a6a12a4fdb7a0571531aeca1f03d66 Mon Sep 17 00:00:00 2001
From: Luiz Gustavo <gutomec@gmail.com>
Date: Thu, 4 Jun 2026 04:08:13 -0300
Subject: [PATCH] docs(env): document REALTIME_ENC_KEY in .env.example

Note the 16-ASCII-byte requirement and the crash-loop caveat so a fresh
deploy doesn't repeat the AES-128 bad-key-size mistake.
---
 infra/disclosure-stack/.env.example | 1 +
 1 file changed, 1 insertion(+)

diff --git a/infra/disclosure-stack/.env.example b/infra/disclosure-stack/.env.example
index 915453e..6301d62 100644
--- a/infra/disclosure-stack/.env.example
+++ b/infra/disclosure-stack/.env.example
@@ -60,6 +60,7 @@ DASHBOARD_USERNAME=admin               # Studio basic-auth
 DASHBOARD_PASSWORD=
 SECRET_KEY_BASE=                       # used by realtime + auth
 VAULT_ENC_KEY=                         # 32-char hex for Supabase Vault
+REALTIME_ENC_KEY=                      # 16 ASCII bytes — AES-128 key for Supabase Realtime. Reusing VAULT_ENC_KEY here crash-loops the container.
 MEILI_MASTER_KEY=
 IMGPROXY_KEY=
 IMGPROXY_SALT=