env the fuckin ssl shit man why not

src/get_sq_env.py

@@ -6,6 +6,14 @@ dotenv.load_dotenv()
 
 LEGO_CAT_ID = os.getenv("SQUARE_LEGO_CAT_ID")
 
+# SSL Certificate paths (optional - for direct HTTPS, not needed with nginx)
+SSL_CERT_PATH = os.getenv("SSL_CERT_PATH")
+SSL_KEY_PATH = os.getenv("SSL_KEY_PATH")
+
+# P7B certificate for Square webhook signature verification
+# This is uploaded to Square Dashboard, not used by the server
+SQUARE_P7B_PATH = os.getenv("SQUARE_P7B_PATH")
+
 if os.getenv("SQUARE_ENV") == "production":
     SQUARE_APP_ID = os.getenv("PROD_SQUARE_APP_ID")
     SQUARE_TOKEN = os.getenv("PROD_SQUARE_TOKEN")