ssrf:
  # Hosts an untrusted AI base URL (and an AI-returned image URL) may use.
  # A leading dot matches any subdomain. GOLEM15_SSRF_ALLOWED_HOSTS
  # (a comma list) replaces the list when it is set and not empty.
  allowed_hosts:
    - oaidalleapiprodscus.blob.core.windows.net
    - .openai.com
ai:
  # Request timeout of every AI provider call, in seconds.
  timeout_seconds: 120