; comfyui-mcp Manager v2 config TEMPLATE  (-> <user-dir>/__manager/config.ini)
; -----------------------------------------------------------------------------
; REQUIRED for the comfyui-mcp Agent Panel to install models/nodes remotely.
;
;   network_mode = personal_cloud
;       The /v2 install-model security gate only permits remote installs in
;       personal_cloud mode. Do NOT leave this at the default or remote installs
;       are rejected.
;
;   security_level = weak
;       Permissive so the Agent Panel can install custom nodes from ARBITRARY
;       git URLs — Manager classes those high-risk and silently skips them at
;       "normal-" (registry-id installs pass, git-URL installs never appear: a
;       confusing half-working state). This is a single-user pod whose premise
;       is agent-driven installs. Set "normal-" to restore the guardrails.
;       Override at runtime with the COMFY_SECURITY_LEVEL env (re-asserted by
;       /post_start.sh on every boot).
;
; FAST-RESTART design: ComfyUI runs from the IMMUTABLE image at /opt/ComfyUI, but
; its --user-directory is the /workspace volume, so comfyui_manager reads its
; config from the VOLUME (user/__manager/config.ini, or the older
; user/default/ComfyUI-Manager/config.ini). This file is baked into the image as
; a template (/opt/ComfyUI/config.ini.seed); /post_start.sh copies it to BOTH
; volume locations on first boot and re-asserts these two keys on every boot
; (idempotent), so the remote-install gate is always correct.
[default]
network_mode = personal_cloud
security_level = weak