# Safe local defaults. Do not put credentials in this file.
SIP_GO_AGENT_MODE=mock
DISPATCHER_DB=./dispatcher.db
AGENT_SPOOL=./spool
AGENT_ID=agent-local
AGENT_VERSION=dev
CELL_ID=cell-local
# Optional Agent Unary gRPC listener; enabling it requires all three mTLS files.
# AGENT_GRPC_LISTEN=127.0.0.1:19090
# MTLS_CA_FILE=/etc/sip-go-agent/pki/ca.pem
# MTLS_CERT_FILE=/etc/sip-go-agent/pki/agent.pem
# MTLS_KEY_FILE=/etc/sip-go-agent/pki/agent.key
# MTLS_SERVER_NAME=agent.example.internal
# Optional Agent-side certificate allowlist for independent Dispatcher identity.
# Use comma-separated SHA-256 leaf fingerprints; omit to trust the configured CA group.
# MTLS_PEER_CERT_FINGERPRINTS=aa:bb:cc:dd:...
# Optional Dispatcher-owned Agent endpoint inventory. Each entry is bound to
# one Agent/Cell identity and is probed/activated before Dispatcher startup.
# DISPATCHER_AGENT_ENDPOINTS_FILE=/etc/sip-go-agent/agent-endpoints.json
# Real/mixed SIP outbound calls are allowed only 09:00-20:00 Asia/Shanghai;
# the Agent/Dispatcher reject requests outside this fixed window.
# Real Agent mode also requires a management-approved static Cell artifact.
# AGENT_STATIC_ARTIFACT=/etc/sip-go-agent/artifacts/cell-a.json
# Optional redacted per-phone business log. The key is injected, never written here.
# AGENT_CALL_BUSINESS_LOG=/var/lib/sip-go-agent/call-business.jsonl
# AGENT_CALL_PHONE_LOG_KEY=<at-least-16-byte-secret>
RABBITMQ_EXCHANGE=agent-call.commands.v1
# Set RABBITMQ_URL only in a controlled mixed/real environment.
# RABBITMQ_URL=amqp://user:password@broker/vhost