.env.example

# Network device credentials
ROUTER_USERNAME=your-router-username
ROUTER_PASSWORD=your-router-password

# Jira Service Management integration
JIRA_BASE_URL=https://whatever.atlassian.net
JIRA_EMAIL=your-email@company.com
JIRA_API_TOKEN=your-api-token-here   # from https://id.atlassian.com/manage-profile/security/api-tokens
JIRA_PROJECT_KEY=SUP                 # use the Jira-assigned key (not the project name)
JIRA_ISSUE_TYPE=[System] Incident    # JSM native type; falls back to Task if rejected

# TLS / security settings
# Defaults are lab-safe (TLS disabled). Flip to true for production deployments.
RESTCONF_PORT=443             # RESTCONF port for Cisco c8000v devices
RESTCONF_VERIFY_TLS=false     # Verify TLS certificates for RESTCONF connections
SSH_STRICT_HOST_KEY=false     # Enforce SSH host key verification for Cisco IOS-XE connections

# Logging settings
LOG_LEVEL=INFO    # DEBUG | INFO | WARNING | ERROR
LOG_FORMAT=json   # json | text

# Discord remote approval (optional — enables 2AM remote fix approval via emoji reactions)
# See metadata/discord/discord_setup.md for bot setup instructions
DISCORD_BOT_TOKEN=your-discord-bot-token
DISCORD_CHANNEL_ID=your-noc-approvals-channel-id
APPROVAL_TIMEOUT_MINUTES=10
AGENT_TIMEOUT_MINUTES=30    # max agent session runtime before forced kill (default: 30)

# HashiCorp Vault (optional — falls back to env var secrets above if not configured)
# See metadata/vault/vault_setup.md for setup instructions
VAULT_ADDR=http://127.0.0.1:8200
VAULT_TOKEN=dev-root-token

# NetBox device inventory (optional — falls back to inventory/NETWORK.json if not configured)
# See metadata/netbox/netbox_setup.md for setup instructions
NETBOX_URL=http://localhost:8000
NETBOX_TOKEN=your-netbox-api-token

# Watcher tuning (optional — defaults shown)
CRASH_COOLDOWN_MINUTES=5    # after agent crash, suppress new sessions for N minutes
NETWORK_LOG_FILE=/var/log/network.json  # Vector-parsed syslog output file

# Dashboard (optional — oncall-dashboard.service)
# See dashboard/oncall-dashboard.service for systemd setup
DASHBOARD_PORT=5555          # single port for both HTTP (index.html) and WebSocket
DASHBOARD_RETAIN_LOGS=0      # set to 1 to keep session NDJSON files after session ends

# IMPORTANT: Restrict .env file permissions to owner-read-only after copying:
#   chmod 600 .env