# enable verbose logging and diagnostics
debug: false

tokens:
  # server secret for signing auth tokens; auto-generated if empty
  secret: ""
  # openrouter.ai api token (required)
  openrouter: ""
  # exa search api token (optional; used by search tools)
  exa: ""

settings:
  # normalize unicode in assistant output (optional; default: true)
  cleanup: true

authentication:
  # require login with username and password
  enabled: false
  # list of users with bcrypt password hashes
  users:
  - username: admin
    password: $2a$12$eH6Du2grC7aOUDmff2SrC.yKPWea/fq0d76c3JsvhGxhGCEOnWTRy