.env.example

# Sinter Environment Configuration

# ── Logging ──
SINTER_LOG_LEVEL=info

# ── Anthropic API (required) ──
# Sinter runs on the Anthropic API (Claude). Bring your own key — that's all you
# need. No account, login, or OAuth: the key is sent as the x-api-key header.
ANTHROPIC_API_KEY=

# Optional: override the default model (claude-sonnet-4-6).
# SINTER_LLM_MODEL=claude-opus-4-8

# ── Use any other provider ──
# Anthropic is the recommended default, but Sinter works with whatever provider
# you have. Set that provider's key (it is auto-detected) — e.g.:
# OPENAI_API_KEY=
# GOOGLE_API_KEY=
# OPENROUTER_API_KEY=
# MINIMAX_API_KEY=
# GLM_API_KEY=
# …or run `sinter --configure --provider openai|google|ollama|lmstudio|openrouter|minimax|glm`,
# or point at any custom OpenAI-/Anthropic-compatible endpoint:
# SINTER_LLM_BASE_URL=
# SINTER_LLM_MODEL=
# SINTER_LLM_API_KEY=

# ============================================
# SECURITY CONFIGURATION
# ============================================

# SSRF Protection
LIMINAL_ALLOWED_HOSTS=
LIMINAL_ALLOW_LOCALHOST_LLM=true
LIMINAL_ALLOW_PRIVATE_IP_LLM=false

# Sandbox
LIMINAL_DISABLE_SANDBOX=false

# Rate Limiting
LIMINAL_RATE_LIMIT_GENERAL=100
LIMINAL_RATE_LIMIT_WINDOW_MINUTES=15
LIMINAL_RATE_LIMIT_EXPORT=10
LIMINAL_RATE_LIMIT_EXPORT_WINDOW_MINUTES=60
LIMINAL_RATE_LIMIT_SANDBOX=30
LIMINAL_RATE_LIMIT_SANDBOX_WINDOW_MINUTES=15