# Copy to .env and fill in. Never commit .env.
#
#   cp .env.example .env

# Password for the daemon API and web UI. Also the paseo user's login password,
# so it is what `sudo` asks for inside a terminal.
# Generate one with: openssl rand -base64 24
PASEO_PASSWORD=

# Comma-separated DNS names allowed to reach the daemon. The domain mapped in
# Coolify/Dokploy must be listed here. IPs and localhost are always allowed.
PASEO_HOSTNAMES=

# Proxy source IPs whose X-Forwarded-Proto the daemon trusts. Without this it
# trusts loopback only, reads the request as plain HTTP behind Coolify/Dokploy,
# and tells the web UI to open ws:// from an HTTPS page -- which browsers block.
# `uniquelocal` covers the private ranges Docker bridge networks use.
PASEO_TRUSTED_PROXIES=uniquelocal

# Container hostname, shown as the host label in the web UI. Without it the
# label is a random container ID.
PASEO_LABEL=paseo

# Timezone for logs and agent shells.
TZ=Asia/Ho_Chi_Minh

# Git identity for agents and terminals, as author and committer. git reads
# these directly, so no `git config` step is needed.
GIT_NAME=tiennm99
GIT_EMAIL=tiennm99@outlook.com

# Shell for Paseo's terminals. Paseo reads $SHELL and otherwise falls back to
# /bin/sh (dash); it ignores the user's login shell, so `chsh` has no effect.
SHELL=/bin/zsh