68 lines
2.6 KiB
Bash
68 lines
2.6 KiB
Bash
# Copy to .env and chmod 600 .env. Never commit real credentials.
|
|
# Generate: python3 -c 'import secrets; print(secrets.token_urlsafe(32))'
|
|
ASR_WEB_TOKEN=
|
|
ASR_WEB_PORT=18088
|
|
# Empty means exact same-origin browser access. For a TLS reverse proxy set https://your-approved-domain.
|
|
PUBLIC_ORIGIN=
|
|
|
|
BAILIAN_API_KEY=
|
|
# AI text/TTS adapters use these server-side values; never put them in MQ or agent versions.
|
|
BAILIAN_BASE_URL=https://dashscope.aliyuncs.com/compatible-mode/v1
|
|
BAILIAN_WSS_BASE_URL=wss://dashscope.aliyuncs.com/api-ws/v1/inference/
|
|
BAILIAN_TTS_WSS_BASE_URL=
|
|
BAILIAN_TTS_MODEL=
|
|
BAILIAN_TTS_VOICE=
|
|
BAILIAN_ASR_MODEL=fun-asr-realtime
|
|
FUNASR_API_KEY=
|
|
BAILIAN_ASR_MODELS=fun-asr-realtime
|
|
BAILIAN_WS=wss://dashscope.aliyuncs.com/api-ws/v1/inference/
|
|
FUNASR_WS=wss://dashscope.aliyuncs.com/api-ws/v1/inference/
|
|
VOLC_APP_KEY=
|
|
VOLC_APP_ID=
|
|
VOLC_ACCESS_TOKEN=
|
|
VOLC_RESOURCE_ID=volc.bigasr.sauc.duration
|
|
VOLC_WS=wss://openspeech.bytedance.com/api/v3/sauc/bigmodel
|
|
|
|
# RabbitMQ / real Cell worker (values are illustrative; inject secrets at runtime).
|
|
RABBITMQ_DEFAULT_USER=
|
|
RABBITMQ_DEFAULT_PASS=
|
|
RABBITMQ_URL=amqp://user:password@127.0.0.1:5672/%2F
|
|
RABBITMQ_PORT=5672
|
|
AGENT_CALL_AI_PROFILE=/app/configs/ai-test.bailian.example.yaml
|
|
AGENT_CALL_PROMPT_FILE=/app/prompts/test-call.txt
|
|
AGENT_CALL_TENANT_KEY=
|
|
AGENT_CALL_EXECUTION_LEDGER=/data/cell-executions.sqlite3
|
|
CELL_ARI_URL=http://127.0.0.1:8088
|
|
CELL_ARI_USERNAME=outbound
|
|
CELL_ARI_PASSWORD=
|
|
CELL_ARI_APP=agent-call
|
|
CELL_SIP_TRUNK_ID=provider-primary
|
|
CELL_CALLER_ID=BD93205882
|
|
# Optional trusted JSON route map; call.execute supplies only route_policy_id/caller_profile_id.
|
|
CELL_ROUTE_MAP_JSON=
|
|
CELL_RTP_BIND_HOST=127.0.0.1
|
|
CELL_RECORDING_DIR=/data/recordings
|
|
|
|
# Optional Asterisk deployment: fill after verifying the approved image/version.
|
|
ASTERISK_IMAGE=
|
|
# ARI_PASSWORD and SIP_PRIMARY_PASSWORD/SIP_BACKUP_PASSWORD go to the renderer
|
|
# through the process environment/secret manager, not this committed example.
|
|
# Optional independent SIP management profile: use distinct credentials and
|
|
# inject opaque token maps through the secret manager before starting it.
|
|
SIP_MANAGEMENT_PORT=18090
|
|
SIP_MANAGEMENT_MODE=mock
|
|
SIP_ADMIN_TOKENS=
|
|
SIP_READ_TOKENS=
|
|
# Real mode only: host directory containing the CA and client certificate/key.
|
|
SIP_CELL_TLS_DIR=./secrets/sip-management
|
|
SIP_CELL_TLS_CA_FILE=/run/sip-tls/ca.pem
|
|
SIP_CELL_TLS_CERT_FILE=/run/sip-tls/client.pem
|
|
SIP_CELL_TLS_KEY_FILE=/run/sip-tls/client-key.pem
|
|
SIP_CELL_PUBLISH_TIMEOUT_SECONDS=15
|
|
|
|
# Optional SaaS scheduler read-only SIP directory integration.
|
|
AGENT_CALL_SIP_READONLY_URL=
|
|
AGENT_CALL_SIP_READONLY_TOKEN=
|
|
AGENT_CALL_SIP_READONLY_CA_FILE=
|
|
AGENT_CALL_SIP_READONLY_TIMEOUT_SECONDS=5
|