PORT=3050
DATA_DIR=./data

# Gates recipient add/remove and revoke. Unset disables /api/admin/* (503)
# but push/pull/grant keep working for already-registered recipients.
ADMIN_PASSWORD=change-me

# Replay-protection window (seconds) for signed CLI requests.
REQUEST_MAX_SKEW_SECONDS=300