# =============================================================================
# Cybermes (Hermes Bug Bounty Agent) — Environment Configuration Template
# =============================================================================
# Copy this file to .env and configure your values:
#   cp .env.example .env
#
# NEVER commit your actual .env file or credentials to Git!
# =============================================================================

# ─────────────────────────────────────────────────────────────────────────────
# 1. LLM PROVIDER CONFIGURATION
# ─────────────────────────────────────────────────────────────────────────────
# OpenRouter (Recommended for cloud models - e.g. Claude 3.7, DeepSeek R1, GPT-4o)
OPENROUTER_API_KEY=your_api_key_here
# Note: Leave OPENROUTER_BASE_URL unset/commented to use official https://openrouter.ai/api/v1
# Only uncomment if you run a local proxy / 9router on port 20128:
# OPENROUTER_BASE_URL=http://localhost:20128/v1

# Alternative Direct Providers:
# ANTHROPIC_API_KEY=your_anthropic_api_key_here
# OPENAI_API_KEY=your_openai_api_key_here
# DEEPSEEK_API_KEY=your_deepseek_api_key_here

# Local LLM / Reverse Proxy Providers (Optional):
# ROUTER_API_KEY=your_proxy_key_here
# ROUTER_BASE_URL=http://localhost:20128/v1
# LM_BASE_URL=http://127.0.0.1:1234/v1
# LMSTUDIO_API_KEY=lm-studio

# ─────────────────────────────────────────────────────────────────────────────
# 2. TELEGRAM BOT INTEGRATION (Gateway)
# ─────────────────────────────────────────────────────────────────────────────
# Telegram bot token obtained from @BotFather
TELEGRAM_BOT_TOKEN=your_telegram_bot_token_here

# Numeric user ID(s) allowed to interact with the bot (comma-separated).
# Get your numeric user ID by messaging @userinfobot on Telegram.
TELEGRAM_ALLOWED_USERS=
GATEWAY_ALLOW_ALL_USERS=false
HERMES_YOLO_MODE=1
TELEGRAM_HOME_CHANNEL=
TELEGRAM_HOME_CHANNEL_THREAD_ID=

# ─────────────────────────────────────────────────────────────────────────────
# 3. OMNIROUTE / GATEWAY CONFIGURATION
# ─────────────────────────────────────────────────────────────────────────────
OMNIROUTE_DASHBOARD_PORT=20128

# ─────────────────────────────────────────────────────────────────────────────
# 4. SECURITY TOOLS RATE LIMITING & OPTIONS
# ─────────────────────────────────────────────────────────────────────────────
NUCLEI_RATE_LIMIT=10
SUBFINDER_RATE_LIMIT=10
HTTPX_RATE_LIMIT=50
KATANA_RATE_LIMIT=10
HTTPX_TIMEOUT=30
KATANA_DEPTH=3

# ─────────────────────────────────────────────────────────────────────────────
# 5. OPTIONAL HTTP INTERCEPTING PROXY (Caido / Burp Suite)
# ─────────────────────────────────────────────────────────────────────────────
# HTTP_PROXY=http://127.0.0.1:8080
# HTTPS_PROXY=http://127.0.0.1:8080

# ─────────────────────────────────────────────────────────────────────────────
# 6. WORKSPACE PATHS (inside container or host)
# ─────────────────────────────────────────────────────────────────────────────
HERMES_WORKSPACE=/workspace
NUCLEI_OUTPUT_DIR=/workspace/output/nuclei
RECON_OUTPUT_DIR=/workspace/recon
REPORTS_DIR=/workspace/reports
LOGS_DIR=/workspace/logs