VITE_API_URL=
VITE_WS_URL=

# Defaults use the Vite dev proxy:
# - REST: /api -> http://127.0.0.1:8081
# - WebSocket: /ws -> ws://127.0.0.1:8080

# ---------------------------------------------------------------------------
# Production self-host serve (scripts/serve-prod.mjs)
#
# SCOPE: single-operator self-host ONLY. NOT multi-tenant SaaS, NOT cloud
# hosting. Do NOT put secrets in this file or commit a real .env.
# ---------------------------------------------------------------------------

# Bind host for the PRODUCTION static server (serves dashboard/dist).
# Defaults to loopback. Only change this if you deliberately need another
# device on a trusted local network to reach the UI (e.g. behind a reverse
# proxy). Exposing beyond loopback removes the loopback safety net.
HOST=127.0.0.1

# Port for the PRODUCTION static server.
PORT=4174

# NOTE: The local API server (port 8081) and WebSocket server (port 8080) are
# intentionally hard-bound to 127.0.0.1 inside dashboard/server/watcher.ts and
# are NOT configurable by design. serve-prod.mjs reverse-proxies /api and /ws
# to them, so the static server's HOST is the only externally reachable bind.
