# =====================================================================
# The VM daemon's settings. Installed to /etc/owuivm/vmd.env by
# vm/host/install.sh, and read by owuivmd.service.
#
# INSTALLED ONLY IF IT IS NOT ALREADY THERE. The live copy holds a Gitea
# token, so re-running install.sh must never overwrite it. Change the
# live file to change the running daemon; change this one to change what
# a fresh install starts from.
#
# This file is TRACKED, so keep secrets out of it. The token line is
# deliberately left empty here and filled in on the host.
# =====================================================================

# Where vmd reaches Gitea to push a finished project. The LAN address,
# not the public name: this is a host-to-host call on the same network,
# and owuivmd.service's address filter allows exactly this destination.
OWUITOOLS_GITEA_URL=http://192.168.1.10:7200

# What the user is given as a link. The public name, because the LAN
# address is no use to anyone reading the chat.
OWUITOOLS_GITEA_PUBLIC_URL=https://git.example.com

# The organisation repositories are created under, and the bot account
# that owns the commits.
OWUITOOLS_GITEA_ORG=vmlab
OWUITOOLS_GITEA_BOT=vmagent

# A Gitea access token for that bot, with write access to the org.
# WITHOUT IT a session still runs and still keeps its files - it just
# publishes nothing and returns no link.
#   Setup: docs/setup/gitea.md
OWUITOOLS_GITEA_TOKEN=

# The tool gateway, for the sub-agent's web_search and read_page. vmd
# calls the same endpoints the assistant calls, so there is one search in
# this house rather than two implementations of one. SearXNG itself is
# unreachable from here and from the sandbox, deliberately: it lives in
# netguard's network namespace behind a default-deny filter.
#
# The address is the gw container's pinned one from docker-compose.yml.
OWUITOOLS_TOOLS_URL=http://172.22.0.10:8000

# The same bearer token Open WebUI's tool connection uses -
# OWUITOOLS_AUTH_TOKEN from configs/owuitools.env. Without it the
# sub-agent simply has no lookup tools.
OWUITOOLS_AUTH_TOKEN=