# GoClaw environment variables.
# Copy to .env and fill in values. For Docker Compose, do NOT use 'export' prefix.
#
# Auto-generated by prepare-env.sh: GOCLAW_GATEWAY_TOKEN, GOCLAW_ENCRYPTION_KEY.
# LLM provider API keys: configure via the web dashboard setup wizard.

# --- Gateway (required) ---
# Required for Docker/external binds. Run ./prepare-env.sh to generate.
# Local loopback-only development may opt into empty-token mode with:
# GOCLAW_ALLOW_INSECURE_NO_AUTH=1
GOCLAW_GATEWAY_TOKEN=
GOCLAW_ENCRYPTION_KEY=
POSTGRES_PASSWORD=

# --- PostgreSQL (Docker Compose) ---
# Published host port for the postgres service (default 5432). Change if something
# else already binds 5432 on your machine (e.g. a local PostgreSQL install).
# POSTGRES_PORT=5433
#
# Optional overrides (defaults: user/db goclaw):
# POSTGRES_USER=goclaw
# POSTGRES_DB=goclaw

# --- Database (non-Docker, or host tools connecting to Compose Postgres) ---
# Inside Compose, goclaw uses the internal DSN (postgres:5432) automatically.
# From your host (./goclaw, psql), use localhost and POSTGRES_PORT, e.g.:
# GOCLAW_POSTGRES_DSN=postgres://goclaw:YOUR_PASSWORD@127.0.0.1:5433/goclaw?sslmode=disable

# --- Cloudflare Tunnel (only when using docker-compose.cloudflared.yml) ---
# Create `.env.cloudflared` next to this file (not tracked in git). Copy from `.env.cloudflared.example`.
# TUNNEL_TOKEN=<paste token from Zero Trust → Networks → Tunnels → Install connector>

# --- Sandbox (only when using docker-compose.sandbox.yml) ---
# Docker socket GID: 999 on Linux, 0 on Windows/macOS Docker Desktop.
# DOCKER_GID=0

# --- Debug ---
# GOCLAW_TRACE_VERBOSE=1