# Firecrawl + Gluetun stack variables
TZ=America/Chicago

# Existing SearXNG public/base URL
SEARXNG_BASE_URL=http://10.5.1.6:8888/

# Firecrawl API is exposed from the gluetun network namespace on this host port.
# 3002 is already occupied by Gitea on PD, so Firecrawl uses 3302 externally.
FIRECRAWL_PORT=3302
FIRECRAWL_INTERNAL_PORT=3002

# Gluetun control UI LAN bind. Keep it on the PD LAN IP, not 0.0.0.0.
GLUETUN_WEBUI_BIND_ADDRESS=10.5.1.6
GLUETUN_WEBUI_PORT=8390

# Gluetun HTTP control API auth for the web UI.
# Generate a real key for the live .env and keep only placeholders in git.
GLUETUN_CONTROL_API_KEY=replace-me-with-a-22-char-base58-key
HTTP_CONTROL_SERVER_AUTH_DEFAULT_ROLE={"auth":"apikey","apikey":"replace-me-with-a-22-char-base58-key"}

# Firecrawl runtime tuning
USE_DB_AUTHENTICATION=false
NUM_WORKERS_PER_QUEUE=4
CRAWL_CONCURRENT_REQUESTS=4
MAX_CONCURRENT_JOBS=2
BROWSER_POOL_SIZE=2
LOGGING_LEVEL=info
BLOCK_MEDIA=true
ALLOW_LOCAL_WEBHOOKS=false

# Allow VPN-routed containers to still reach local RFC1918 services when needed.
FIREWALL_OUTBOUND_SUBNETS=10.5.0.0/16,172.16.0.0/12,192.168.0.0/16

# Firecrawl secrets — replace in the live .env only, never in git.
POSTGRES_USER=firecrawl
POSTGRES_PASSWORD=replace-me
POSTGRES_DB=firecrawl
BULL_AUTH_KEY=replace-me-with-a-long-random-string
TEST_API_KEY=

# Optional SearXNG tuning
SEARXNG_ENGINES=
SEARXNG_CATEGORIES=