# LLeMbas configuration
# Copy to .env and edit. All variables are prefixed LEMBAS_.

# REQUIRED. Secret used to sign session cookies and to derive the key that
# encrypts stored API keys at rest. Generate one with:
#   python -c "import secrets; print(secrets.token_urlsafe(48))"
# Changing this invalidates all sessions AND makes stored API keys unreadable.
LEMBAS_SECRET_KEY=

# Where the SQLite database and uploaded files live.
LEMBAS_DATA_DIR=./data

# HTTP server bind address.
LEMBAS_HOST=127.0.0.1
LEMBAS_PORT=8080

# Autoreload on code change. Development only.
LEMBAS_RELOAD=false

# debug | info | warning | error
LEMBAS_LOG_LEVEL=info

# Allow new accounts to register themselves. This is only the INITIAL value:
# once an administrator sets it under Admin -> General, the stored setting wins
# and this variable is ignored. The very first account created is always an
# admin regardless.
LEMBAS_ALLOW_SIGNUP=true

# Default theme for signed-out visitors: moria (dark) or shire (light).
LEMBAS_DEFAULT_THEME=moria

# Seconds a login session stays valid. Default 30 days.
LEMBAS_SESSION_TTL=2592000

# Seconds to wait on an upstream LLM endpoint before giving up.
LEMBAS_REQUEST_TIMEOUT=300