# Test-only config overrides layered on top of local.yaml when NODE_APP_INSTANCE=test.
# Used by the auth-hardening test run — do NOT commit real keys here.
---
webServer:
  host: '127.0.0.1'
  port: 9877
  auth:
    enabled: true
    permanentServerTokens:
      - 'pst-TEST-AAAAAAAAAAAAAAAAAAAAAAAA'
    jwtToken:
      encryptKey: 'TEST-ENCRYPT-KEY-0123456789ABCDEF-testing-0123456789'
      checkMCPName: false
      isCheckIP: false
    basic:
      username: 'adminuser'
      password: 'adminpass'
    revoked:
      jwtTokens:
        - token: '1776650314414.e289c9721baa7d250c79adfcff94cec6087cda74d357e156bca209eefd2fa082077a08780c3a57c7e92a5ccb6041343a6ad1659fb64fce6e4c4a968a23cb4729785b34edb0eb6e6f278d9174d38212246d3c0ca81c077b8e977d3feb15cefea55c6605cf3cb0f74a13bdbcae700963e3b4'
          note: 'revoked for token-list test'
      users:
        - 'revokeduser'

adminPanel:
  enabled: true
  authType:
    - 'jwtToken'
    - 'basic'
    - 'permanentServerTokens'

agentTester:
  enabled: true
  useAuth: false
  showFooterLink: true
  openAi:
    apiKey: 'sk-fake-not-used-for-these-tests'

consul:
  service:
    enable: false

mcp:
  transportType: http