# codex-lb runs with zero configuration — every value below is optional and
# commented out. Uncomment only what a docs page for your scenario tells you to.
# Configuration guide: https://soju06.github.io/codex-lb/configuration/

# Where codex-lb stores its data (database, encryption key, archives).
# Default: ~/.codex-lb (host) or /var/lib/codex-lb (Docker).
# CODEX_LB_DATA_DIR=~/.codex-lb

# Listen port (default 2455) — host (uvx/local) runs only, and only as a
# process environment variable (not via .env.local, which maps CODEX_LB_-
# prefixed variables only). In Docker the container always listens on 2455
# (the entrypoint pins --port 2455); change the HOST side of the compose
# ports mapping instead, e.g. "8080:2455".
# PORT=2455

# Database. SQLite (default) needs nothing. For PostgreSQL:
# CODEX_LB_DATABASE_URL=postgresql+asyncpg://codex_lb:codex_lb@127.0.0.1:5432/codex_lb

# Encryption key file (pin for Docker volumes; must be shared across replicas).
# CODEX_LB_ENCRYPTION_KEY_FILE=/var/lib/codex-lb/encryption.key

# Dashboard auth: standard (password + TOTP, default) | trusted_header | disabled
# https://soju06.github.io/codex-lb/authentication/
# CODEX_LB_DASHBOARD_AUTH_MODE=standard
# CODEX_LB_DASHBOARD_AUTH_PROXY_HEADER=Remote-User

# Behind a reverse proxy? Trust X-Forwarded-For from these sources only:
# https://soju06.github.io/codex-lb/deployment/remote/
# CODEX_LB_FIREWALL_TRUST_PROXY_HEADERS=true
# CODEX_LB_FIREWALL_TRUSTED_PROXY_CIDRS=172.18.0.0/16

# Fixed dashboard bootstrap token for first remote login (default: auto-generated,
# printed to logs). https://soju06.github.io/codex-lb/getting-started/
# CODEX_LB_DASHBOARD_BOOTSTRAP_TOKEN=your-secret-token

# OAuth login callback bind host (auto-detected: 0.0.0.0 in containers).
# CODEX_LB_OAUTH_CALLBACK_HOST=0.0.0.0

# Leader election is enabled by default and required for multi-replica/multi-worker
# deployments. Uncomment to opt OUT (single-instance deployments only).
# CODEX_LB_LEADER_ELECTION_ENABLED=false

# Everything else (timeouts, pools, bulkheads, session bridge, observability) is an
# advanced setting with tested defaults. Do not tune it unless the docs page for
# your scenario says so. Full generated reference of every variable:
# https://soju06.github.io/codex-lb/reference/settings/