# WARNING: Replace all CHANGE_ME values before deploying.
# Do not use placeholder passwords in production.
#
# This is the deploy-target env file for the Reborn `ironclaw` image
# (docker/reborn/entrypoint.sh). With no CLI arguments the entrypoint runs
# `serve --host $IRONCLAW_REBORN_SERVE_HOST --port $PORT`. See the repo-root
# `.env.example` for the exhaustive list of IRONCLAW_REBORN_* variables.

# Pin the Docker image version for deterministic deployments.
# Update this value when deploying a new release.
# IRONCLAW_VERSION=v1.0.0

# --- Reborn serve binding ---
# 0.0.0.0 binds to all interfaces (required so the published Docker port is
# reachable). The systemd unit publishes container port 3000.
IRONCLAW_REBORN_SERVE_HOST=0.0.0.0
IRONCLAW_REBORN_SERVE_PORT=3000

# --- Reborn profile & storage ---
# `production` seeds the Postgres-backed hosted-multi-tenant config
# (docker/reborn/config.production.toml). Requires the Postgres URL and a
# secret master key below.
IRONCLAW_REBORN_PROFILE=production
IRONCLAW_REBORN_POSTGRES_URL=postgres://ironclaw:CHANGE_ME@localhost:5432/ironclaw?sslmode=require
IRONCLAW_REBORN_SECRET_MASTER_KEY=CHANGE_ME

# Persistent home for config.toml and any volume-backed state.
IRONCLAW_REBORN_HOME=/data/ironclaw-reborn

# --- Logging ---
IRONCLAW_REBORN_LOG=info

# --- LLM provider (NEAR AI Cloud, API key auth) ---
# Get an API key from https://cloud.near.ai
NEARAI_API_KEY=CHANGE_ME

# --- WebUI operator access ---
# Token + user id the WebChat surface authenticates against.
IRONCLAW_REBORN_WEBUI_TOKEN=CHANGE_ME
IRONCLAW_REBORN_WEBUI_USER_ID=reborn-cli-operator