# Copy to .env and fill in. docker compose picks .env up automatically.
# Never commit the populated .env — it's in .gitignore at repo root.

# Public URL Open WebUI is reached at, with scheme. Used for auth redirects
# and email-link generation.
WEBUI_URL=https://chat.example.com

# Bare hostname (no scheme) for the same Open WebUI host. Used as the cookie
# domain by the Anubis sidecar so its session cookie scopes correctly.
LLM_URL=chat.example.com

# Cookie-signing key for Open WebUI sessions. Generate once with:
#   openssl rand -hex 32
# Must stay stable across restarts — rotating it logs every user out.
WEBUI_SECRET_KEY=replace-with-32-byte-hex

# Ed25519 private key (hex) for the Anubis PoW sidecar. Generate with:
#   openssl rand -hex 32
# Only needed if you uncomment the anubis-owui service in docker-compose.yml.
ANUBIS_OWUI_KEY=replace-with-32-byte-hex

# ComfyUI image tag to deploy. `latest` tracks whatever the release workflow
# last pushed; pin to a v* tag (e.g. 0.1.0) for reproducible deploys.
COMFYUI_IMAGE_TAG=latest

# HuggingFace access token. Only needed if comfyui-init-models.sh references
# gated repos (Flux-dev, SD3, etc.). Generate a read token at
# https://huggingface.co/settings/tokens. Leave empty for public-only.
HF_TOKEN=

# HTTPS base URL of an S3 bucket / CDN that hosts mirrored Ollama model
# tarballs (created by mirror-ollama-model.sh). Files under this base are
# fetched by init-models.sh's s3_pull instead of registry.ollama.ai —
# faster and immune to upstream rate-limiting / removal. Example:
#   S3_OLLAMA_BASE=https://your-bucket.s3.amazonaws.com/ollama-models
# Leave empty to fall back to plain `ollama pull` for everything.
S3_OLLAMA_BASE=