# Firecrawl + Gluetun stack variables
TZ=America/Chicago

# Existing SearXNG public/base URL
SEARXNG_BASE_URL=http://10.5.1.6:8888/

# Firecrawl API is exposed from the gluetun network namespace on this host port.
# 3002 is already occupied by Gitea on PD, so Firecrawl uses 3302 externally.
FIRECRAWL_PORT=3302
FIRECRAWL_INTERNAL_PORT=3002

# Keep the Gluetun control UI localhost-only by default. Reverse proxy later if desired.
GLUETUN_WEBUI_PORT=8390

# Firecrawl runtime tuning
USE_DB_AUTHENTICATION=false
NUM_WORKERS_PER_QUEUE=4
CRAWL_CONCURRENT_REQUESTS=4
MAX_CONCURRENT_JOBS=2
BROWSER_POOL_SIZE=2
LOGGING_LEVEL=info
BLOCK_MEDIA=true
ALLOW_LOCAL_WEBHOOKS=false

# Allow VPN-routed containers to still reach local RFC1918 services when needed.
FIREWALL_OUTBOUND_SUBNETS=10.5.0.0/16,172.16.0.0/12,192.168.0.0/16

# Firecrawl secrets — replace in the live .env only, never in git.
POSTGRES_USER=firecrawl
POSTGRES_PASSWORD=replace-me
POSTGRES_DB=firecrawl
BULL_AUTH_KEY=replace-me-with-a-long-random-string
TEST_API_KEY=

# Optional SearXNG tuning
SEARXNG_ENGINES=
SEARXNG_CATEGORIES=