.env.example

# OpenBrowser Broker configuration

OPENBROWSER_BROKER_HOST=127.0.0.1
OPENBROWSER_BROKER_PORT=8767
OPENBROWSER_BROKER_ROOT=/var/lib/openbrowser-broker
OPENBROWSER_BROWSER_POOL_DIR=/var/lib/openbrowser-pool
OPENBROWSER_AUTHENTICATED_PROFILE_DIR=/var/lib/openbrowser-broker/profiles/authenticated

# Browser slot isolation.
# Use a different port range when running multiple OpenBrowser instances on one host.
OPENBROWSER_SLOT_PORT_START=9223
OPENBROWSER_SLOT_COUNT=8
# Or set explicit slots: OPENBROWSER_SLOTS=pool-a:19223,pool-b:19224

# Public URLs used in auth handoff links and remote API docs.
# Leave empty for local-only development.
OPENBROWSER_PUBLIC_AUTH_BASE_URL=
OPENBROWSER_PUBLIC_OPENBROWSER_BASE_URL=

# Auth handoff UX.
# Auto-starts the browser login view when the one-time auth link opens.
OPENBROWSER_AUTH_PORTAL_AUTOSTART=1

# Optional trusted source IP/CIDR list for passwordless noVNC handoff.
# When the requester IP matches, the portal embeds the temporary VNC password
# into the noVNC URL fragment so the human sees one click-less browser view.
# Example: OPENBROWSER_AUTH_TRUSTED_CIDRS=203.0.113.10/32,2001:db8::/64
OPENBROWSER_AUTH_TRUSTED_CIDRS=

# Only set this behind a trusted reverse proxy that overwrites X-Forwarded-For.
OPENBROWSER_AUTH_TRUST_X_FORWARDED_FOR=0

# Comma-separated API keys for /openbrowser/v1.
# Prefer long random values from: openssl rand -base64 48
OPENBROWSER_API_KEYS=

# Optional compatibility variables for older deployments.
AX_BROWSER_PUBLIC_AUTH_BASE_URL=
AX_BROWSER_PUBLIC_OPENBROWSER_BASE_URL=