# Copy to .env and chmod 600 .env. Never commit real credentials.
# Generate: python3 -c 'import secrets; print(secrets.token_urlsafe(32))'
ASR_WEB_TOKEN=
ASR_WEB_PORT=18088
# Empty means exact same-origin browser access. For a TLS reverse proxy set https://your-approved-domain.
PUBLIC_ORIGIN=

BAILIAN_API_KEY=
# AI text/TTS adapters use these server-side values; never put them in MQ or agent versions.
BAILIAN_BASE_URL=https://dashscope.aliyuncs.com/compatible-mode/v1
BAILIAN_WSS_BASE_URL=wss://dashscope.aliyuncs.com/api-ws/v1/inference/
BAILIAN_TTS_WSS_BASE_URL=
BAILIAN_TTS_MODEL=
BAILIAN_TTS_VOICE=
BAILIAN_ASR_MODEL=fun-asr-realtime
FUNASR_API_KEY=
BAILIAN_ASR_MODELS=fun-asr-realtime
BAILIAN_WS=wss://dashscope.aliyuncs.com/api-ws/v1/inference/
FUNASR_WS=wss://dashscope.aliyuncs.com/api-ws/v1/inference/
VOLC_APP_KEY=
VOLC_APP_ID=
VOLC_ACCESS_TOKEN=
VOLC_RESOURCE_ID=volc.bigasr.sauc.duration
VOLC_WS=wss://openspeech.bytedance.com/api/v3/sauc/bigmodel

# RabbitMQ / real Cell worker (values are illustrative; inject secrets at runtime).
RABBITMQ_DEFAULT_USER=
RABBITMQ_DEFAULT_PASS=
RABBITMQ_URL=amqp://user:password@127.0.0.1:5672/%2F
RABBITMQ_PORT=5672
AGENT_CALL_AI_PROFILE=/app/configs/ai-test.bailian.example.yaml
AGENT_CALL_PROMPT_FILE=/app/prompts/test-call.txt
AGENT_CALL_TENANT_KEY=
AGENT_CALL_EXECUTION_LEDGER=/data/cell-executions.sqlite3
CELL_ARI_URL=http://127.0.0.1:8088
CELL_ARI_USERNAME=outbound
CELL_ARI_PASSWORD=
CELL_ARI_APP=agent-call
CELL_SIP_TRUNK_ID=provider-primary
CELL_CALLER_ID=BD93205882
# Optional trusted JSON route map; call.execute supplies only route_policy_id/caller_profile_id.
CELL_ROUTE_MAP_JSON=
CELL_RTP_BIND_HOST=127.0.0.1
CELL_RECORDING_DIR=/data/recordings

# Optional Asterisk deployment: fill after verifying the approved image/version.
ASTERISK_IMAGE=
# ARI_PASSWORD and SIP_PRIMARY_PASSWORD/SIP_BACKUP_PASSWORD go to the renderer
# through the process environment/secret manager, not this committed example.
# Optional independent SIP management profile: use distinct credentials and
# inject opaque token maps through the secret manager before starting it.
SIP_MANAGEMENT_PORT=18090
SIP_MANAGEMENT_MODE=mock
SIP_ADMIN_TOKENS=
SIP_READ_TOKENS=
# Real mode only: host directory containing the CA and client certificate/key.
SIP_CELL_TLS_DIR=./secrets/sip-management
SIP_CELL_TLS_CA_FILE=/run/sip-tls/ca.pem
SIP_CELL_TLS_CERT_FILE=/run/sip-tls/client.pem
SIP_CELL_TLS_KEY_FILE=/run/sip-tls/client-key.pem
SIP_CELL_PUBLISH_TIMEOUT_SECONDS=15

# Optional SaaS scheduler read-only SIP directory integration.
AGENT_CALL_SIP_READONLY_URL=
AGENT_CALL_SIP_READONLY_TOKEN=
AGENT_CALL_SIP_READONLY_CA_FILE=
AGENT_CALL_SIP_READONLY_TIMEOUT_SECONDS=5