# Copy to .env and chmod 600 .env. Never commit real credentials.
# Generate: python3 -c 'import secrets; print(secrets.token_urlsafe(32))'
ASR_WEB_TOKEN=
ASR_WEB_PORT=18088
# Empty means exact same-origin browser access. For a TLS reverse proxy set https://your-approved-domain.
PUBLIC_ORIGIN=

BAILIAN_API_KEY=
FUNASR_API_KEY=
BAILIAN_ASR_MODELS=fun-asr-realtime
BAILIAN_WS=wss://dashscope.aliyuncs.com/api-ws/v1/inference/
FUNASR_WS=wss://dashscope.aliyuncs.com/api-ws/v1/inference/
VOLC_APP_KEY=
VOLC_APP_ID=
VOLC_ACCESS_TOKEN=
VOLC_RESOURCE_ID=volc.bigasr.sauc.duration
VOLC_WS=wss://openspeech.bytedance.com/api/v3/sauc/bigmodel

# Optional Asterisk deployment: fill after verifying the approved image/version.
ASTERISK_IMAGE=
# ARI_PASSWORD and SIP_PRIMARY_PASSWORD/SIP_BACKUP_PASSWORD go to the renderer
# through the process environment/secret manager, not this committed example.
# Optional independent SIP management profile: use distinct credentials and
# inject opaque token maps through the secret manager before starting it.
SIP_MANAGEMENT_PORT=18090
SIP_MANAGEMENT_MODE=mock
SIP_ADMIN_TOKENS=
SIP_READ_TOKENS=
# Real mode only: host directory containing the CA and client certificate/key.
SIP_CELL_TLS_DIR=./secrets/sip-management
SIP_CELL_TLS_CA_FILE=/run/sip-tls/ca.pem
SIP_CELL_TLS_CERT_FILE=/run/sip-tls/client.pem
SIP_CELL_TLS_KEY_FILE=/run/sip-tls/client-key.pem
SIP_CELL_PUBLISH_TIMEOUT_SECONDS=15

# Optional SaaS scheduler read-only SIP directory integration.
AGENT_CALL_SIP_READONLY_URL=
AGENT_CALL_SIP_READONLY_TOKEN=
AGENT_CALL_SIP_READONLY_CA_FILE=
AGENT_CALL_SIP_READONLY_TIMEOUT_SECONDS=5