# Cauldron — copy to /srv/secrets/cauldron.env
# (chmod 600, root:root). Some values are already populated by the deploy
# bootstrap (CLAWDFORGE_*); fill in the rest before first start.

# Flask
SECRET_KEY=change-me-32-bytes-of-entropy

# Bind
BIND_HOST=0.0.0.0
BIND_PORT=7790

# Mealie (mealie.example.com is already wired with Authentik OIDC)
MEALIE_BASE_URL=https://mealie.example.com
MEALIE_API_TOKEN=

# clawdforge (centralized claude-runner service)
CLAWDFORGE_URL=http://clawdforge:8800
CLAWDFORGE_TOKEN=
DEFAULT_MODEL=sonnet
DEFAULT_TIMEOUT_SECS=120

# Local dev/admin bearer (used until Authentik OIDC lands in v0.2)
ADMIN_BEARER=change-me-this-is-the-cauldron-api-token