First upload

.env.example

@@ -2,6 +2,7 @@
 # Broccolini Bot – Example environment (no secrets)
 # Copy to .env and fill in real values. See README for full docs.
 # =============================================================================
+# Test env: set ENV_FILE=.env.test to load .env.test instead (see docs/setup/ENV_AND_SECURITY.md).
 
 # --- Discord: Core ---
 DISCORD_TOKEN=                    # Bot token from Discord Developer Portal
@@ -55,6 +56,12 @@ MY_EMAIL=                         # Support inbox email address
 # --- Server & URLs ---
 NGROK_URL=                        # Public URL (optional); run ngrok outside this repo
 DISCORD_ONLY_PORT=5000            # Port for healthcheck / Discord-only server
+# HEALTHCHECK_HOST=               # Optional; bind address for health server (default: all interfaces; use 127.0.0.1 for local-only)
+
+# --- bOSScord (support cockpit) ---
+# Set BOSSCORD_API_KEY to enable /api (ticket list, thread, send message). Use same key in bOSScord app login.
+# BOSSCORD_API_KEY=               # e.g. from: openssl rand -hex 32
+# BOSSCORD_CORS_ORIGIN=*          # Optional; default * (set to bOSScord origin in production)
 
 # --- Database ---
 MONGODB_URI=                      # MongoDB connection string (e.g. mongodb+srv://user:pass@cluster/dbname)