# pfSense REST API v2 connection
PFSENSE_URL=https://192.168.1.1
# Preferred: API key from System -> REST API -> Keys
PFSENSE_API_KEY=
# Fallback: basic auth (requires BasicAuth enabled in REST API settings)
PFSENSE_USERNAME=
PFSENSE_PASSWORD=
PFSENSE_VERIFY_SSL=false
PFSENSE_TIMEOUT=60

# Safety controls
PFSENSE_ALLOW_WRITES=false
PFSENSE_DRY_RUN=false
PFSENSE_REQUIRE_DESCRIPTION_PREFIX=mcp:
PFSENSE_BLOCK_WAN_INBOUND_ANY=true
PFSENSE_AUDIT_LOG_PATH=/root/.hermes/logs/pfsense-mcp-audit.jsonl