# BoxBox Configuration

# Server settings
port: 8080
host: "0.0.0.0"

# JWT authentication secret. Override with BOXBOX_JWT_SECRET.
jwt_secret: "change-me-in-production-use-a-long-random-string"

# Users are bcrypt hashes configured here or with BOXBOX_USERS_<username>.
# At least one user is required.
# users:
#   admin: "$2b$12$..."

# Auth endpoint rate limit per client IP.
rate_limit_rps: 2

# Optional WebSocket/CORS origin allow-list.
# Empty means same-origin only. A literal "*" explicitly allows all origins
# and should be used only after reviewing the cross-site WebSocket risk.
allowed_origins: []

# Forwarding headers are ignored unless the direct peer is in this CIDR list.
trusted_proxies: []

# Upload settings
max_upload_mb: 10240  # 10GB max upload size
chunk_size_mb: 10     # 10MB chunk size for browser uploads

# Mount points - directories accessible through the file manager
# Mounts appear as drives; a mount inside another mount (Downloads inside home)
# appears under Places as a shortcut. Set kind: drive or kind: place to override.
# Set auto_discover: true to automatically detect mounted drives in that directory
mount_points:
  - name: "drives"
    path: "/media/devmon"
    read_only: false
    auto_discover: true  # Auto-detect mounted drives in /media/devmon

  - name: "home"
    path: "/home/user"
    read_only: false

  # Default home folders used by the sidebar quick-access entries.
  # Override the matching Docker volume path in .env to map any of these elsewhere.
  - name: "desktop"
    path: "/home/user/Desktop"
    read_only: false

  - name: "downloads"
    path: "/home/user/Downloads"
    read_only: false

  - name: "documents"
    path: "/home/user/Documents"
    read_only: false

  - name: "music"
    path: "/home/user/Music"
    read_only: false

  - name: "pictures"
    path: "/home/user/Pictures"
    read_only: false

  - name: "videos"
    path: "/home/user/Videos"
    read_only: false