# /etc/mirror-wall-watch.env — config for mirror-wall-watch.timer.
# chmod 0600, root:root. It holds the ntfy token. Never commit a filled-in copy.
# install-wall-watch.sh seeds this from the example and then NEVER overwrites it.

# The presence probe. /healthz is exempt from the address gate, so loopback works
# even when MIRROR_ALLOW_CIDRS excludes 127.0.0.0/8 — which is why the container
# healthcheck works too. Use whatever loopback URL reaches this deployment.
WALL_HEALTH_URL=https://127.0.0.1/healthz

# Alert when fewer than this many viewers are attached. Set 0 to stop alerting on
# "nobody is watching" and only alert when the service itself stops answering
# (useful while a fleet has no wall plugged in).
WALL_EXPECT_VIEWERS=1

# Consecutive bad checks before the first notification (~1 min per check). Three
# rides out a Firefox relaunch on the wall; raise it if that is normal for you.
WALL_THRESHOLD=3

# Keep shouting while it stays down. 0 = alert once per incident.
WALL_RENOTIFY_SECS=3600

# Optional: the URL a notification opens when tapped.
WALL_STATUS_URL=https://mirror.reeseapps.com/healthz

# ntfy (outbound only — this never reads anything back).
NTFY_URL=https://ntfy.reeseapps.com
NTFY_TOKEN=
NTFY_TOPIC=pi