# Copy this file to .env before running docker compose.
# Use a non-shared secret; the browser will prompt for this token when needed.
# Generate with: `openssl rand -hex 32`
PI_WEB_AUTH_TOKEN=change-me

# Linux users should set these to match the host account so bind-mounted files
# are not created as root. macOS/OrbStack/Docker Desktop can usually leave the
# defaults or set them explicitly for consistency.
#
#   id -u
#   id -g
PI_WEB_CONTAINER_UID=1000
PI_WEB_CONTAINER_GID=1000

# Host ports exposed by the containerized dev environment.
PI_WEB_PORT=3141
PI_WEB_WEB_PORT=5173

# Optional: override where iteration telemetry looks for pi JSONL session logs.
# The Compose dev environment sets this to the mounted pi default automatically.
# PI_WEB_SESSION_DIR=/home/bun/.pi/agent/sessions

# Optional: allow a custom hostname for the Vite dev server.
# For Tailscale/LAN access, set this to the hostname only, without scheme/port.
# PI_WEB_VITE_ALLOWED_HOSTS=bakery-dev.example.ts.net

# Optional: publish preview stack URLs through a LAN/Tailscale hostname.
# Include the scheme; Bakery will replace the port with the preview stack port.
# Note: Docker Compose currently publishes only the main Bakery ports by default,
# so dynamically allocated preview stack ports may require an additional port-range
# publishing slice before they are reachable from outside the container.
# PI_WEB_PREVIEW_PUBLIC_BASE_URL=http://bakery-dev.example.ts.net

# Optional trusted-local-development Git/GitHub auth is configured with explicit
# Compose override files, not enabled here by default. See:
# docs/container-development.md#git-and-github-auth
# compose.ssh-auth.example.yaml defaults to Docker Desktop/OrbStack's
# /run/host-services/ssh-auth.sock. On Linux/custom setups, set:
# PI_WEB_HOST_SSH_AUTH_SOCK=${SSH_AUTH_SOCK}
# PI_WEB_CONTAINER_SSH_AUTH_SOCK=/run/host-services/ssh-auth.sock
# PI_WEB_HOST_SSH_KNOWN_HOSTS=${HOME}/.ssh/known_hosts

PI_WEB_WORKSPACE_ROOT="$PWD"