env.example

# Network / bind. Production should normally bind only to localhost and expose
# the app through Cloudflare Tunnel or another reverse proxy.
APP_HOST=127.0.0.1
APP_PORT=3000

# Public origin used for WebSocket origin checks and secure-cookie inference.
# Must exactly match the browser origin in production.
# Either APP_PUBLIC_ORIGIN or APP_BASE_URL is accepted.
APP_PUBLIC_ORIGIN=https://terminal.example.com
# APP_BASE_URL=https://terminal.example.com

# Keep enabled behind Cloudflare / reverse proxy.
APP_TRUST_PROXY=1

# PIN auth. Set one of APP_PIN or APP_PIN_HASH.
# APP_PIN is convenient for local testing. Prefer APP_PIN_HASH in production.
APP_PIN=123456
# Format: scrypt$<salt-hex>$<hash-hex>
APP_PIN_HASH=

# Session cookie
APP_COOKIE_NAME=chat2ide_session
# auto | always | never
APP_COOKIE_SECURE=auto
APP_SESSION_TTL_HOURS=24

# Login throttling
APP_LOGIN_MAX_ATTEMPTS=5
APP_LOGIN_LOCKOUT_SECONDS=120
APP_LOGIN_ATTEMPT_WINDOW_SECONDS=600

# WebSocket guardrail. Incoming messages above this size are rejected by ws.
APP_WS_MAX_MESSAGE_BYTES=131072

# Codex CLI command. The command must be executable by the user running
# chat2ide, and Codex CLI should already be installed and authenticated.
CODEX_COMMAND=codex
# Supports:
# 1) space-separated string, e.g. "--model your-model"
# 2) JSON string array, e.g. ["--model","your-model"]
CODEX_ARGS=
# Business boundary for the remote terminal. Point this at the project you want
# Codex CLI to operate on, and run chat2ide with a least-privilege OS account.
CODEX_CWD=/srv/your-project

# Terminal defaults. Ring buffer is only recent-output replay, not full logs.
TERMINAL_DEFAULT_COLS=120
TERMINAL_DEFAULT_ROWS=32
TERMINAL_BUFFER_BYTES=262144
TERMINAL_MAX_SESSIONS=8
TERMINAL_MAX_INPUT_BYTES=65536