.env.example

# Copy to `.env` and edit. docker-compose.yml reads it automatically.

# Host UID/GID for the container's `cheetah` user. Run `id -u` / `id -g`
# on the host. Defaults to 1000:1000 (typical first Linux user).
UID=1000
GID=1000

# Public port for the web UI on the host.
WEB_PORT=8080

# Cloud provider keys — leave blank if you only use local Ollama.
ANTHROPIC_API_KEY=
OPENAI_API_KEY=

# Atlas Cloud — hosted OpenAI-compatible endpoint, used via the `custom/` adapter.
# Run: cheetahclaws --model custom/deepseek-ai/deepseek-v4-pro
# https://www.atlascloud.ai/?utm_source=github&utm_medium=link&utm_campaign=cheetahclaws
# CUSTOM_BASE_URL=https://api.atlascloud.ai/v1
# CUSTOM_API_KEY=your_atlascloud_api_key

# ── Bot tokens (recommended: env > REPL arg > config.json) ──
# Setting these here keeps the secret out of readline history and out of
# ~/.cheetahclaws/config.json. The bridges read them at startup.
TELEGRAM_BOT_TOKEN=
SLACK_BOT_TOKEN=
# QQ bot (qq-botpy): AppID is a public identifier; only QQ_SECRET is sensitive.
QQ_APPID=
QQ_SECRET=

# ── Web UI ──
# Per-deployment JWT signing secret. Strongly recommended for production —
# overrides the auto-generated file at ~/.cheetahclaws/web_secret.
CHEETAHCLAWS_WEB_SECRET=

# ── Security toggles (defaults shown) — see docs/guides/security.md ──
# Set to 0 to hard-disable bridge !cmd shell (default 1, owner-bound anyway).
# CHEETAHCLAWS_BRIDGE_TERMINAL=1
# Set to 1 to bypass the credential-path denylist (~/.ssh/id_*, ~/.aws, …).
# CHEETAHCLAWS_FS_NO_SANDBOX=0
# Set to 1 to hard-disable plugin loading.
# CHEETAHCLAWS_DISABLE_PLUGINS=0
# Comma-separated plugin names to whitelist; unset means "all enabled".
# CHEETAHCLAWS_PLUGIN_ALLOWLIST=
# Set to 1 to allow MCP configs to inject LD_PRELOAD / PYTHONPATH / etc.
# CHEETAHCLAWS_MCP_TRUST_ENV=0