hub:
  enabled: true
  port: 8080

  auth:
    # Set enabled: false for single-user mode (no authentication)
    # Set enabled: true and provide values from your identity provider (Auth0, Okta, etc.) - recommended
    # Set enabled: true with empty values to use Apheris Demo Auth0 (localhost only)
    enabled: false
    domain: ""
    audience: ""
    clientId: ""

models:
  # Set enabled=true to pull the model image and run its container
  # Set enabled=false to skip the model (it will not be pulled or started)
  # Boltz2 is disabled by default
  mock:
    enabled: true
    port: 7771

  openfold3:
    enabled: true
    port: 7779

  boltz2:
    enabled: false
    port: 7773

db:
  # true = deploy local Postgres in Docker
  # false = use external Postgres and set dsn below
  deploy: true

  # Leave empty when deploy=true (auto-generated)
  # For external DBs (e.g. RDS), specify a DSN explicitly:
  # dsn: "postgres://user:pass@host:5432/dbname?sslmode=require"
  # Note: Special characters in username/password must be percent-encoded
  dsn: ""

# Apheris-provided base64-encoded "user:token" for pulling model images from a container registry
pullSecret: "..."

# Optional: Base64-encoded API key for Apheris-hosted Foldify MSA server (msa.foldify.apheris.net)
# Only set this if you use a private registry and change the Apheris-provided pullSecret
# If not specified, pullSecret will be used for both registry authentication and MSA access
msaSecret: ""
