# Copy to .env and chmod 600 — never commit .env

# Login (required)
GROKBUILD_EMAIL=you@example.com
GROKBUILD_PASSWORD=change-me-to-a-strong-password

# Session cookie HMAC (generate: openssl rand -hex 32)
SESSION_SECRET=
SESSION_MAX_AGE=86400
COOKIE_NAME=grokbuild_session

# Public site origin for CORS (your HTTPS URL, no trailing slash)
PUBLIC_ORIGIN=https://grok.example.com
# Or multiple: ALLOW_ORIGINS=https://a.example.com,https://b.example.com

# Paths
# GROK_USER_HOME=/home/youruser
# GROK_HOME=/home/youruser/.grok
# GROK_BIN=/home/youruser/.grok/bin/grok
WORKDIR=
TMUX_SESSION=grok

# Bind (leave on localhost when using a reverse proxy)
AUTH_HOST=127.0.0.1
AUTH_PORT=7126
TTYD_PORT=7125