# Production physical-host example. Inject secrets and approved paths out of band.
SIP_GO_AGENT_MODE=real
DISPATCHER_ID=dispatcher-primary
DISPATCHER_DB=/var/lib/sip-go-agent/dispatcher/dispatcher.db
RABBITMQ_EXCHANGE=agent-call.commands.v1
# RABBITMQ_URL=<injected-broker-url>
DISPATCHER_AGENT_ENDPOINTS_FILE=/etc/sip-go-agent/agent-endpoints.json
MTLS_CA_FILE=/etc/sip-go-agent/pki/ca.pem
MTLS_CERT_FILE=/etc/sip-go-agent/pki/dispatcher.pem
MTLS_KEY_FILE=/etc/sip-go-agent/pki/dispatcher.key
MTLS_SERVER_NAME=dispatcher.internal
# Single Dispatcher AgentControl gRPC listener. Agent facts and upload RPCs share it; Agents receive only presigned PUT grants.
DISPATCHER_GRPC_LISTEN=127.0.0.1:19443
DISPATCHER_ALLOWED_AGENT_IDS=agent-cell-a
DISPATCHER_OSS_REGION=cn-beijing
DISPATCHER_OSS_ENDPOINT=oss-cn-beijing-internal.aliyuncs.com
DISPATCHER_OSS_BUCKET=<injected-bucket>
DISPATCHER_OSS_KEY_PREFIX=agent-call/recordings
DISPATCHER_OSS_GRANT_TTL_SECONDS=900
DISPATCHER_OSS_MAX_ASSET_BYTES=67108864
DISPATCHER_OSS_ACCESS_KEY_ID_FILE=/etc/sip-go-agent/secrets/oss-access-key-id
DISPATCHER_OSS_ACCESS_KEY_SECRET_FILE=/etc/sip-go-agent/secrets/oss-access-key-secret
# DISPATCHER_CONTROL_LISTEN=127.0.0.1:18080
# DISPATCHER_CONTROL_TOKEN=<injected-secret>