.env.example

# -------------------------------------------------------
# Auth
# -------------------------------------------------------

# JWT signing secret — generate with:
# python3 -c "import secrets; print(secrets.token_hex(32))"
SECRET_KEY=change-me-in-production

# JWT signing algorithm
ALGORITHM=HS256

# JWT expiry in hours
ACCESS_TOKEN_EXPIRE_HOURS=8

# -------------------------------------------------------
# Database
# -------------------------------------------------------

# SQLite path inside the backend container (volume-mounted from ./data/)
DATABASE_URL=sqlite+aiosqlite:////data/web_terminal.db

# -------------------------------------------------------
# Sandbox container
# -------------------------------------------------------

# Docker image used for each terminal session
SANDBOX_IMAGE=web-terminal-sandbox:latest

# Docker network name created for sandbox containers
# Remove "Internal": True in docker_manager.py to allow internet access
SANDBOX_NETWORK=web_terminal_sandbox

# Memory limit per container (Docker format: 256m, 1g, etc.)
CONTAINER_MEMORY=256m

# CPU share per container (fractional cores, e.g. 0.5 = half a core)
CONTAINER_CPUS=0.5

# PID limit per container — prevents fork bombs
CONTAINER_PIDS_LIMIT=50

# -------------------------------------------------------
# Session lifecycle
# -------------------------------------------------------

# Seconds of inactivity before a session is auto-terminated (default: 30 min)
IDLE_TIMEOUT=1800

# Hard maximum session duration in seconds (default: 4 hours)
MAX_SESSION_TIME=14400

# How often the cleanup loop runs, in seconds
CLEANUP_INTERVAL=60

# Maximum concurrent sessions per user
MAX_SESSIONS_PER_USER=3

# -------------------------------------------------------
# nginx
# -------------------------------------------------------

# Host port exposed by nginx
PORT=80