APP_NAME="dn42 Autopeer"
HOST="127.0.0.1"
PORT="8000"
DOMAIN="example.com"
SESSION_SECRET="change-me"
DATABASE_URL="sqlite:///./autopeer.db"
LOCAL_ASN="4242420000"

KIOUBIT_PUBLIC_KEY_PATH="app/keys/public_key.pem"

TELEGRAM_BOT_TOKEN=""
TELEGRAM_BACKEND_SECRET="change-me-too"
TELEGRAM_BACKEND_URL="http://127.0.0.1:8000"

# Optional FindNOC quick login (https://findnoc.ox5.cc). When FINDNOC_API_TOKEN is set, the bot's
# /login first asks FindNOC which dn42 ASN the user's Telegram account controls and binds in one tap,
# falling back to the Kioubit Mini App otherwise. Leave the token blank to disable. PM
# https://t.me/HExpNetworkBot the message "/findnocAPI" to obtain a token.
FINDNOC_API_URL="https://findnoc.ox5.cc"
FINDNOC_API_TOKEN=""

# Set to 1 only for local testing to tolerate the placeholder secrets above. The backend
# refuses to start with default SESSION_SECRET / TELEGRAM_BACKEND_SECRET otherwise.
# (start.py --allow-http sets this automatically.)
ALLOW_INSECURE_DEFAULTS="0"

# Public looking glass rate limit: max requests per window per client IP (0 disables).
LG_RATE_LIMIT="20"
LG_RATE_WINDOW_SECONDS="60"
# Set to "X-Forwarded-For" ONLY behind a trusted reverse proxy that sets it; otherwise all
# clients share the proxy's IP and one bucket. Leave empty when not behind a proxy.
FORWARDED_IP_HEADER=""