server:
  bind: "127.0.0.1:8080"
  shutdown_grace: 10s

database:
  path: "./lethe.db"
  busy_timeout: 5s

auth:
  allowed_users: ["bigbes"]
  admins: []
  forward_auth:
    enabled: true
    user_header: "Remote-User"
  oidc:
    enabled: false
    issuer: "https://auth.example.com"
    audience: "lethe"
    username_claim: "preferred_username"
    # dev_stub: local-dev only — never enable in production
    # dev_stub:
    #   enabled: false
    #   bind: "127.0.0.1:8181"
    #   token_ttl: "24h"

logging:
  level: "info"
  format: "tint"   # tint | json

ingest:
  max_body_bytes: 16777216        # 16 MiB
  max_turn_content_bytes: 4194304 # 4 MiB
  chunk_size: 500