.env.example

# ──────────────────────────────────────────────────────────────────────────────
# ARIA — Secrets template
# Copy this file to .env and fill in your values. Never commit .env to Git.
# Non-secret configuration (model IDs, connector types, GCP settings, etc.)
# lives in conf.yaml — see conf_template.yaml.
# ──────────────────────────────────────────────────────────────────────────────

# ServiceNow — password for the service account defined in conf.yaml (servicenow.user)
SNOW_PASSWORD=<your-servicenow-password>

# Anthropic — API key for LLM calls across all agents
# Reference implementation uses Anthropic. Swap for your provider if you bring
# your own LLMClientInterface implementation.
ANTHROPIC_API_KEY=<your-anthropic-api-key>

# Slack — bot token with chat:write scope, for the channel defined in conf.yaml (slack.channel_id)
SLACK_BOT_TOKEN=<your-slack-bot-token>

# MS Teams (optional — alternative notifier; swap connector in dependencies.py)
TEAMS_WEBHOOK_URL=<your-teams-incoming-webhook-url>

# Google Chat (optional — alternative notifier; swap connector in dependencies.py)
GOOGLE_CHAT_WEBHOOK_URL=<your-google-chat-webhook-url>

# CDP — SSH private key PEM content for Agent 2 log extraction from Cloudera CDP nodes
# Set via: export CDP_SSH_KEY="$(cat /path/to/private_key)"
CDP_SSH_KEY=<pem-content-of-ssh-private-key>

# CDP — SSH host public key for strict host verification (recommended, prevents MITM attacks)
# Format: "<key-type> <base64-encoded-public-key>" e.g. "ssh-ed25519 AAAA..."
# If not set, ARIA falls back to WarningPolicy (logs a warning but still connects)
CDP_HOST_KEY=

# GCP — service account JSON key (base64-encoded) for BigQuery and GCS access
# Only required when connectors.log = gcp in conf.yaml
GCP_SA_KEY=<base64-encoded-service-account-json>

# AWS — credentials for the AWS Secrets Manager vault implementation
# Only required if you are using the AWS SM vault backend
AWS_ACCESS_KEY_ID=<your-aws-access-key-id>
AWS_SECRET_ACCESS_KEY=<your-aws-secret-access-key>

# HashiCorp Vault — token for the Vault vault implementation
# Only required if you are using the Vault backend
VAULT_TOKEN=<your-vault-token>