# Example only. Copy to /etc/thinclient-agent/remote-desktop-credentials.env ON THE
# BOOTED MACHINE, chmod 0600, chown to the kiosk user. Never commit the real file —
# the repo's .gitignore drops *.env and keeps only *.env.example, which is why this one
# is tracked and the real one is not.
#
# One block per `credentials_ref` in configs/remote-desktop/rdp-vnc.json. The ref is
# uppercased and used as the variable prefix, so credentials_ref "framework12" reads
# FRAMEWORK12_USERNAME / FRAMEWORK12_DOMAIN below.
#
# THERE IS NO PASSWORD VARIABLE, ON PURPOSE. thinclient_agent/remote_desktop.py reads
# the username and domain only. A password here would have to be written into a
# .remmina profile in cleartext (Remmina's own encryption is keyed by a secret in
# remmina.pref, which this agent has no business reimplementing), and a cleartext
# password for another machine on the LAN sitting in a file on an unattended kiosk is
# a worse trade than one interactive prompt. Enter the password once in Remmina's
# connect dialog and tick "save password"; Remmina keeps it from then on.

FRAMEWORK12_USERNAME=your-username-here
FRAMEWORK12_DOMAIN=

THINKPAD_USERNAME=your-username-here
THINKPAD_DOMAIN=