# ===========================================
# OpenClaw Command Center - SECURE Configuration
# ===========================================
# Copy this file to .env and configure your values
# NEVER commit .env to version control!
# ===========================================

# ===========================================
# SERVER CONFIGURATION
# ===========================================

# Server port (default: 3000)
PORT=3000

# Bind address - RECOMMENDED: 127.0.0.1 (localhost only)
# Use 0.0.0.0 ONLY if behind a reverse proxy with proper security
BIND_ADDRESS=127.0.0.1

# Trust proxy headers (set to 'true' if behind nginx/traefik)
TRUST_PROXY=false

# Node environment (development/production)
NODE_ENV=production

# ===========================================
# AUTHENTICATION - REQUIRED!
# ===========================================

# API Keys for authentication (comma-separated for multiple keys)
# Generate secure keys with: openssl rand -hex 32
# Example: API_KEYS=key1abc123...,key2def456...
API_KEYS=your-secure-api-key-here

# ===========================================
# CORS CONFIGURATION
# ===========================================

# Allowed origins (comma-separated)
# Example: CORS_ORIGINS=https://yourdomain.com,https://app.yourdomain.com
CORS_ORIGINS=http://localhost:3000

# ===========================================
# OPENCLAW GATEWAY
# ===========================================

# OpenClaw Gateway connection URL
GATEWAY_URL=ws://127.0.0.1:18789

# Gateway authentication token
GATEWAY_TOKEN=

# Demo mode - set to false when connected to real OpenClaw gateway
DEMO_MODE=true

# ===========================================
# OPENAI API (Voice Features)
# ===========================================

# OpenAI API key - required for Whisper STT and TTS
# Leave blank to disable voice features
OPENAI_API_KEY=

# ===========================================
# WEATHER WIDGET
# ===========================================

# Weather location (City,Region,Country - used by wttr.in)
WEATHER_LOCATION=Kingston,Ontario,Canada

# ===========================================
# RATE LIMITING (overrides)
# ===========================================

# Max requests per minute for general endpoints
# RATE_LIMIT_GENERAL=120

# Max requests per minute for voice endpoints (costs money!)
# RATE_LIMIT_VOICE=20

# ===========================================
# LOGGING
# ===========================================

# Log level (debug, info, warn, error)
LOG_LEVEL=info