# admin-canvas configuration template.
#
# Copy this to the container host as (for example)
# /opt/smart-home/admin-canvas/admin-canvas.env, fill in a real token, and chmod 600
# it. Same never-commit handling as digest-engine.env / the wayvnc password — the
# repo .gitignore already covers .env / *.env.

# ---------------------------------------------------------------------------
# Auth — required. admin-canvas fails closed (rejects every request) while this is
# empty; it is not an optional "auth off" toggle. Generate one with, e.g.:
#   openssl rand -hex 32
# The same value goes into the HA-side rest_command's Authorization header — see
# admin-canvas/README.md for the worked example. There is no way for this repo to
# push that value into HA's config for you; both sides are set by hand from the
# same generated value, same as the MQTT credentials elsewhere in this project.
# ---------------------------------------------------------------------------
ADMIN_CANVAS_TOKEN=

# ---------------------------------------------------------------------------
# Run behaviour
# ---------------------------------------------------------------------------
ADMIN_CANVAS_PORT=8092
ADMIN_CANVAS_OUTPUT_DIR=/output
LOG_LEVEL=INFO

# Caps on what a single POST may contain. /show is JSON only (no inline media, see
# README) so its cap is small; /media/<name> takes the raw image/video bytes.
ADMIN_CANVAS_MAX_SHOW_KB=256
ADMIN_CANVAS_MAX_MEDIA_MB=25