# Overlord Client Environment Configuration
# Copy this file to .env or set as environment variables

# Server URL - MUST use wss:// (TLS is always enabled on server)
OVERLORD_SERVER=wss://your-server.com:5173

# TLS Configuration
# For development with self-signed certificates:
# OVERLORD_TLS_INSECURE_SKIP_VERIFY=true

# For production, trust the server certificate (copy server.crt from server):
# OVERLORD_TLS_CA=./certs/server.crt
OVERLORD_TLS_INSECURE_SKIP_VERIFY=false

# Stronger server identity verification (recommended). Comma-separate the
# current and next SHA-256 SPKI pins during certificate-key rotation.
# Generated agents receive the active in-process server pin automatically.
# OVERLORD_TLS_SPKI_PINS=base64-sha256-current,base64-sha256-next

# Client certificate for mutual TLS (optional, advanced)
# OVERLORD_TLS_CLIENT_CERT=./certs/client.crt
# OVERLORD_TLS_CLIENT_KEY=./certs/client.key

# Mutex (single-instance) configuration
# Leave empty or set to "none" to allow multiple instances
# OVERLORD_MUTEX=overlord-client

# Capture Configuration
OVERLORD_CAPTURE_INTERVAL=20s
OVERLORD_DISABLE_CAPTURE=false

# Mode: dev, development, local, release, prod, production
OVERLORD_MODE=production