.env.example

ANTHROPIC_API_KEY=your-api-key-here
# CHAT_PORT=7690
# CHAT_BIND_HOST=127.0.0.1
# SESSION_EXPIRY=2592000000
# Set to 0 for localhost mode (no HTTPS/Cloudflare)
# SECURE_COOKIES=0

# Optional deployment-side Google OAuth client configuration for Gmail and other Google connectors.
# End users should not paste OAuth JSON in the product UI; configure this once at deploy time.
# Use either a file path:
# REMOTELAB_GOOGLE_OAUTH_CLIENT_PATH=/etc/remotelab/google-oauth-client.json
# Or raw JSON if your secret manager injects env values directly:
# REMOTELAB_GOOGLE_OAUTH_CLIENT_JSON={"installed":{"client_id":"...","client_secret":"...","redirect_uris":["https://your-domain/api/connectors/gmail/google/callback"]}}

# Re-enable strict per-instance local filesystem/service boundaries.
# REMOTELAB_ENFORCE_INSTANCE_LOCAL_BOUNDARY=1

# Re-enable dedicated Linux guest users + systemd sandboxing for guest instances.
# REMOTELAB_ENABLE_GUEST_SYSTEMD_ISOLATION=1