SESSION_SECRET=replace-with-a-long-random-secret
# Optional: reachable from the Express server, never from the browser.
# SEARXNG_URL=http://searxng:8080
WEB_SEARCH_TIMEOUT_MS=8000
# Production containers can set UPLOAD_DIR=/app/data/uploads.
# Locally, omitting UPLOAD_DIR uses data/uploads.
UPLOAD_MAX_SIZE_MB=10
UPLOAD_MAX_FILES=5
UPLOAD_MAX_PIXELS=30000000
VISION_MODEL=gemma3:4b
VISION_DEBUG=false
VISION_DEBUG_SHA256_ENABLED=false