.env.example

# =============================================================================
# symbi-hybrid-stack — Master Environment Configuration
# =============================================================================
# Copy to .env and fill in your values:
#   cp .env.example .env

# --- LLM Provider (choose one) ---

# Option 1: OpenRouter (recommended — access to many models)
OPENROUTER_API_KEY=your_openrouter_key_here
OPENROUTER_MODEL=anthropic/claude-sonnet-4

# Option 2: OpenAI
# OPENAI_API_KEY=your_openai_key_here
# CHAT_MODEL=gpt-4o

# Option 3: Anthropic direct
# ANTHROPIC_API_KEY=your_anthropic_key_here
# ANTHROPIC_MODEL=claude-sonnet-4-5-20250514

# --- Symbiont Auth ---
# Random token for HTTP API authentication (auto-generated by `make init` if empty)
SYMBI_AUTH_TOKEN=

# Encryption key for agent context (required — no D-Bus keychain in containers)
# Auto-generated by `make init`. To generate manually: openssl rand -hex 32
SYMBIONT_MASTER_KEY=

# --- AgentPin Identity ---
# Domain used as issuer in agent credentials and for online .well-known discovery
AGENTPIN_DOMAIN=example.com
# Path to TOFU pin store (optional, created by keygen.sh)
# AGENTPIN_PIN_STORE=secrets/pin-store.json

# --- Cloudflare Tunnel (optional) ---
CLOUDFLARE_TUNNEL_TOKEN=

# --- Google Cloud (optional, for cloud failover) ---
GCP_PROJECT_ID=
GCP_REGION=us-central1
GCS_STATE_BUCKET=
ARTIFACT_REGISTRY_REPO=symbi

# --- Slack Integration (optional) ---
SLACK_WEBHOOK_URL=
SLACK_BOT_TOKEN=
SLACK_SIGNING_SECRET=

# --- Webhook Secrets ---
# Used for HMAC-SHA256 webhook signature verification (set manually if needed)
# PIPELINE_WEBHOOK_SECRET=

# --- Vector Backend ---
# SYMBIONT_VECTOR_BACKEND=lancedb
# SYMBIONT_VECTOR_COLLECTION=symbiont_context
# SYMBIONT_VECTOR_DIMENSION=384
# Qdrant-specific (start with: docker compose --profile qdrant up -d)
# SYMBIONT_VECTOR_HOST=symbi-qdrant
# SYMBIONT_VECTOR_PORT=6333

# --- API Token & Proxy ---
# Separate API token (defaults to SYMBI_AUTH_TOKEN if unset)
# SYMBIONT_API_TOKEN=
# Trusted reverse proxies for X-Forwarded-For (comma-separated CIDRs)
# SYMBIONT_TRUSTED_PROXIES=

# --- Port Overrides (defaults shown) ---
# SYMBI_API_PORT=8080
# SYMBI_HTTP_PORT=8081
# A2UI_PORT=3001
# QDRANT_PORT=6333

# --- Composio MCP Integration (optional) ---
# COMPOSIO_API_KEY=