# Arbo engine — real .env lives on irv-ml1 (gitignored), this is the template.
# Copy to .env on the host and fill the secrets. See README.md for provisioning.

# Image comfy-dev builds + pushes (pin a tag; bump on code/schema change only):
ARBO_IMAGE=gitea.phasefinal.com/vh/arbo:0.11.0

# Published port on irv-ml1 (reachable over WireGuard at 10.100.79.3:<port>):
ARBO_PORT=8200
ARBO_BIND=0.0.0.0

# Run-as ownership — must match /worktank owner so basedir writes land clean:
ARBO_UID=1000
ARBO_GID=1000

# Host path of the comfy-dev catalog checkout (the git pull target, mounted ro):
ARBO_CATALOG_DIR=/worktank/arbo/repo

# ── Secrets (DO NOT COMMIT REAL VALUES) ──────────────────────────────
# ENGINE_TOKEN: a real bearer token — auth is OPEN until this is set.
#   Mint a fresh one:  openssl rand -hex 32
ENGINE_TOKEN=

# GRANITE_KEY: the LiteLLM virtual key scoped to arbo (granite-only).
#   comfy-dev already holds 'arbo-prompt-enhance' (issued 2026-06-09) —
#   reuse or rotate it; do NOT use the master sk-corvid key.
GRANITE_KEY=