Environments

There are three stages, each a separate AWS account, all in eu-central-1.

Stage	AWS Account	Domain	Stripe
`copebit-testing`	294416074574	`marco.copebit-training.net` / `*.proxy.marco.copebit-training.net`	Test keys
`dev`	Separate dev account	`agentrunner-dev.copebit.io` / `*.proxy.agentrunner-dev.copebit.io`	Test keys
`prod`	Separate prod account	`agentrunner.copebit.io` / `*.proxy.agentrunner.copebit.io`	Live keys

Configuration

Configuration lives in two places:

.env.<stage> — secrets (gitignored, never committed). Use .env.example as the template.
infrastructure/resources/aws/agent_runner/<stage>.tfvars — non-secret infra variables.

Shared parameters are in infrastructure/resources/aws/customer_specs.yaml.

ar_live_ keys target production; ar_test_ keys target the dev proxy. The prefix is enforced per environment.