# ──────────────────────────────────────────────────────────────
# Server
# ──────────────────────────────────────────────────────────────

PORT=9470

# Auth token. Empty = localhost only, no login.
# Set a value = login enabled + remote access (0.0.0.0).
AUTH_TOKEN=

# ──────────────────────────────────────────────────────────────
# Persistence
# ──────────────────────────────────────────────────────────────

# Where SQLite, configs, node positions and env file overrides are stored.
# Default native: ./data. In docker: /app/data (containerflow-data volume).
# DATA_DIR=/app/data

# ──────────────────────────────────────────────────────────────
# Compose file access (rebuild / remove)
# ──────────────────────────────────────────────────────────────

# Extra host path to mount so rebuild/remove can read compose files
# outside /home, /opt, /srv, /root. Example: /data/apps
# HOST_PROJECTS_DIR=

# ──────────────────────────────────────────────────────────────
# Access control (multi-tenant)
# ──────────────────────────────────────────────────────────────

# Empty = permissive (all actions allowed).
# Set = strict (only containers under these paths are actionable; rest locked).
# Colon-separated. Example: /home/jorge:/srv/myapp
# ALLOWED_PATHS=

# Only applies when ALLOWED_PATHS is active.
# false = block actions on non-compose containers.
# true  = allow them (useful for watchtower, traefik, etc.).
# ALLOW_NON_COMPOSE=false

# ──────────────────────────────────────────────────────────────
# Dev mode (build from source instead of pulling the image)
# ──────────────────────────────────────────────────────────────

# Uncomment, then run: docker compose up -d --build
# COMPOSE_FILE=docker-compose.yml:docker-compose.local.yml