# API only. Loopback binding lets a local frontend or host reverse proxy reach it.
API_BIND_ADDRESS=127.0.0.1
API_PORT=5000
WEBDROP_IMAGE_REPO=registry.oeo.one/justme/webdrop-api
WEBDROP_IMAGE_TAG=local

WEBDROP_REQUESTS_PER_MINUTE=600
WEBDROP_CREATES_PER_MINUTE=30
WEBDROP_SWEEP_INTERVAL_SECONDS=30
# Enable only when requests can arrive solely through a trusted reverse proxy.
WEBDROP_TRUST_FORWARDED_HEADERS=false

# Keep "none" for local development. Configure all Cap values to enable it.
CAPTCHA_PROVIDER=none
CAPTCHA_API_ENDPOINT=
CAPTCHA_SITEVERIFY_URL=
CAPTCHA_SECRET=
CAPTCHA_TIMEOUT_SECONDS=5