# Public origin
WEBUI_URL=http://localhost:3000
CORS_ALLOW_ORIGIN=http://localhost:3000

# Generate all values below; never reuse the example strings.
WEBUI_SECRET_KEY=
WEBUI_ADMIN_EMAIL=admin@example.invalid
WEBUI_ADMIN_PASSWORD=
OPENWEBUI_FORWARD_JWT_SECRET=
INTERNAL_PROVIDER_KEY=
INTERNAL_GATEWAY_KEY=

# The provider key is server-side only. Store it only in a protected .env.
MODEL_API_KEY=
MODEL_API_BASE_URL=https://api.k1412.top

# Extreme tier provider. Keep the key only in the protected server-side .env.
DEEPSEEK_API_KEY=
DEEPSEEK_API_BASE_URL=https://api.deepseek.com

# Storage
POSTGRES_USER=agent
POSTGRES_PASSWORD=
POSTGRES_DB=agent
DATABASE_URL=postgresql+asyncpg://agent:replace-me@postgres:5432/agent
REDIS_URL=redis://redis:6379/0

# Workspace execution
EXECUTION_PROVIDER=local-docker
WORKSPACE_IMAGE=k1412-agent-workspace:dev
WORKSPACE_NETWORK_ENABLED=true
WORKSPACE_MEMORY_LIMIT=2g
WORKSPACE_CPU_LIMIT=2
WORKSPACE_PIDS_LIMIT=512
WORKSPACE_DOWNLOAD_MAX_BYTES=134217728

# Future remote execution node (only used by EXECUTION_PROVIDER=ssh-docker)
WORKSPACE_SSH_HOST=
WORKSPACE_SSH_CONFIG_DIR=

# Branding
# Open WebUI's license permits removing its user-facing branding only for
# deployments with no more than 50 end users in a rolling 30-day period, unless
# you have written permission or an enterprise license.
K1412_REMOVE_UPSTREAM_BRANDING=false