# Shell execution kill switch. Keep 0 until you have read the threat
# model in the README.
EXEC_ENABLED=0

# Command timeout in seconds for shell_exec.
EXEC_TIMEOUT=300

# Extra env var NAMES to pass into the sandbox (comma separated).
# Only for values the sandbox is allowed to see.
EXEC_PASS_ENV=

# Long-lived credential env names the model may reference by name
# (comma separated). These resolve server-side only.
CREDENTIAL_ENV_WHITELIST=

# Extra env names whose literal values must never leave the gateway in
# plaintext (participate in outbound scrubbing but cannot be resolved).
SANITIZE_ENV_KEYS=

# Known-machine aliases for the outbound sanitizer, e.g.
# HOST_ALIASES=203.0.113.7=vps,192.168.1.5=nas
# Unlisted IPs are replaced with [IP]; loopback passes through.
HOST_ALIASES=

# Base URL your users reach the gateway at (used in artifact/app links).
PUBLIC_BASE_URL=http://127.0.0.1:8000