# Gateway Configuration
GATEWAY_PORT={{GATEWAY_PORT}}

# Worker outbound HTTP proxy (workers route all egress through this port).
# Auto-picked at scaffold time so co-resident Lobu projects don't collide.
WORKER_PROXY_PORT={{WORKER_PROXY_PORT}}

# Database. DATABASE_URL selects the backend:
#   file://<dir>    → local embedded Postgres (cluster lives under <dir>/.lobu/pgdata)
#   postgres://...  → connect to an existing Postgres you run yourself
# `file://.` keeps an isolated DB inside this project (./.lobu/pgdata, gitignored).
DATABASE_URL={{DATABASE_URL}}

# Security
ENCRYPTION_KEY={{ENCRYPTION_KEY}}

# Worker Network Access Control
# Empty/unset: Complete isolation (deny all)
# WORKER_ALLOWED_DOMAINS=*: Unrestricted access
# WORKER_ALLOWED_DOMAINS=domains: Allowlist mode (deny by default, allow only these)
# WORKER_DISALLOWED_DOMAINS=domains: Blocklist mode (use with WORKER_ALLOWED_DOMAINS=*)
WORKER_ALLOWED_DOMAINS={{WORKER_ALLOWED_DOMAINS}}
WORKER_DISALLOWED_DOMAINS={{WORKER_DISALLOWED_DOMAINS}}