# LumaOps web application
APP_HOST=0.0.0.0
# Externe webpoort in bridge-modus; LumaOps is standaard bereikbaar op :1223.
WEB_PORT=1223
# Interne containerpoort. Laat deze op 8080 staan bij bridge networking.
APP_PORT=8080
LOG_LEVEL=INFO
TZ=Europe/Brussels
LUMAOPS_ENV=production

# Persistent paths inside the container
OPENRGB_CONFIG_DIR=/config/openrgb
DATABASE_URL=sqlite:////data/lumaops.db
CONFIG_DIR=/config/lumaops
DATA_DIR=/data
LOGS_DIR=/logs

# OpenRGB SDK — never publish port 6742
OPENRGB_HOST=127.0.0.1
OPENRGB_PORT=6742

# Optional connectors and discovery
ENABLE_NETWORK_DISCOVERY=true
ENABLE_HOME_ASSISTANT=false
ENABLE_WLED=false

# Runtime identity (Unraid defaults: nobody/users)
PUID=99
PGID=100

# Authentication is mandatory for the default LAN bind.
AUTH_ENABLED=true
EXTERNAL_ACCESS=false
# Generate a unique value, for example: openssl rand -base64 32
LUMAOPS_ADMIN_TOKEN=replace-with-a-long-random-token
# Keep false for plain HTTP on a trusted LAN; set true behind HTTPS.
SECURE_COOKIES=false
TRUSTED_PROXIES=
CORS_ORIGINS=

# Prefer a Docker secret or keep the generated /config/lumaops/secret.key.
# LUMAOPS_SECRET_KEY=

# Command safety
COMMAND_RATE_PER_SECOND=10
REALTIME_RATE_PER_SECOND=30
COMMAND_TIMEOUT_SECONDS=10